Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Openclaw Performance Skill

v1.0.0

提供OpenClaw性能诊断、一键优化和实时监控,解决响应慢、内存高、Token消耗大等7大性能问题,实现最高95%提升。

0· 83·0 current·0 all-time
by兮颜@ynxiyan

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ynxiyan/openclaw-performance-skill.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Openclaw Performance Skill" (ynxiyan/openclaw-performance-skill) from ClawHub.
Skill page: https://clawhub.ai/ynxiyan/openclaw-performance-skill
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-performance-skill

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-performance-skill
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill is presented as an OpenClaw performance tool and the included scripts perform diagnostics, config merging, backups, optimizations and monitoring of OpenClaw — this is coherent. Minor metadata inconsistencies: registry 'required binaries' lists none even though SKILL.md and scripts require Node.js and the openclaw CLI; the README/SKILL.md lists an examples file that is not present in the manifest. These are poor packaging issues but do not indicate malicious intent.
Instruction Scope
SKILL.md instructs running the provided Node scripts (diagnose, optimize, monitor). The scripts operate on local files (reading/writing ~/.openclaw config files, creating backups under the skill directory, creating local monitor/health scripts) and execute local OpenClaw CLI commands (openclaw --version, openclaw doctor, etc.). All referenced file and command access is within scope for an optimizer and matches the skill description; there are no instructions to gather or transmit secrets or to contact unknown remote endpoints.
Install Mechanism
No install spec is provided (instruction-only), and the package includes local JS scripts. Nothing is downloaded from external URLs or installed silently. Risk is limited to running the provided scripts on the host.
Credentials
The skill declares no required environment variables, but scripts read common environment values (process.env.HOME / USERPROFILE) to find and modify ~/.openclaw config files — that is expected. No API keys, tokens, or unrelated credentials are requested. Users should note that the scripts assume presence of the openclaw CLI and Node.js but these were not declared in the registry's 'required binaries' field.
Persistence & Privilege
always:false (default) and the skill does not attempt to modify other skills or system-wide agent settings. It does write files into the working directory and to the user's home config (~/.openclaw/config.json) and creates backup and monitoring scripts. Running the optimizer will therefore change local configuration files — this is expected but requires user consent and backups.
Assessment
This package appears to do what it says: local diagnosis, applying merged config to ~/.openclaw/config.json, creating backups and monitor scripts. Things to consider before running: 1) Backup your OpenClaw config manually (the scripts also create backups) and review those backups location (openclaw-performance-skill/backups). 2) Inspect the scripts (diagnose.js, optimize.js, monitor.js, quick-optimize.js) yourself — they run local commands and write files but do not transmit data off-host. 3) Ensure Node.js and the openclaw CLI are installed and run the scripts from a non-privileged account; avoid running as root. 4) If you only want to test, run diagnose.js first and review its output before applying optimize.js. 5) Note minor packaging issues: the registry metadata didn't list Node/openclaw as required binaries and the manifest references an example file not present — this suggests sloppy packaging (not malicious). If you need higher assurance, run the scripts in an isolated environment (container/VM) first.
scripts/diagnose-fixed.js:52
Shell command execution detected (child_process).
scripts/diagnose.js:52
Shell command execution detected (child_process).
scripts/optimize.js:196
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk974zh5xdfydhfbvb7f3h34t4n85b3nj
83downloads
0stars
1versions
Updated 6d ago
v1.0.0
MIT-0

OpenClaw性能优化技能

描述

基于B站视频《OpenClaw 卡顿、响应慢?一条提示词让它提速 95%》的学习,提供完整的OpenClaw性能优化解决方案。解决7大性能问题,实现50-95%的性能提升。

适用场景

  • OpenClaw响应缓慢、卡顿
  • 内存占用过高
  • 会话越用越慢
  • 国内使用延迟高
  • 需要优化Token消耗

核心功能

1. 性能诊断

  • 系统健康检查
  • 配置分析
  • 性能基准测试
  • 问题识别

2. 一键优化

  • 自动配置优化
  • 提示词优化
  • 系统设置优化
  • 监控部署

3. 实时监控

  • 性能指标收集
  • 实时仪表板
  • 告警系统
  • 日志分析

4. 优化验证

  • 前后对比测试
  • 效果评估
  • 持续优化建议

使用方法

快速开始

# 运行诊断
node scripts/diagnose.js

# 一键优化
node scripts/optimize.js

# 启动监控
node scripts/monitor.js

详细配置

  1. 查看优化指南:docs/OPTIMIZATION-GUIDE.md
  2. 应用配置模板:configs/optimized-config.json
  3. 更新提示词:prompts/optimized-prompt.md

预期效果

指标优化前优化后提升
响应时间3.2秒1.6秒50%
内存占用4.1GB1.8GB56%
Token消耗1.84M1.02M45%
上下文保留1小时5分钟95%

文件结构

openclaw-performance-skill/
├── SKILL.md                    # 技能说明
├── scripts/                    # 优化脚本
│   ├── diagnose.js            # 诊断脚本
│   ├── optimize.js            # 优化脚本
│   └── monitor.js             # 监控脚本
├── configs/                   # 配置文件
│   └── optimized-config.json  # 优化配置
├── prompts/                   # 提示词
│   └── optimized-prompt.md    # 优化提示词
├── docs/                      # 文档
│   └── OPTIMIZATION-GUIDE.md  # 完整指南
└── examples/                  # 示例
    └── integration-example.js # 集成示例

依赖

  • Node.js >= 18
  • OpenClaw >= 2026.4.0
  • 基础系统工具

注意事项

  1. 优化前备份重要配置
  2. 逐步应用优化措施
  3. 监控优化效果
  4. 根据实际情况调整参数

支持

版本

  • 1.0.0: 初始版本,基于B站视频学习
  • 最后更新: 2026-04-18

Comments

Loading comments...