Diff Tool
v1.0.2文本差异比较工具。比较两个文本、文件或字符串的差异，高亮显示新增、删除和修改的行。适合代码审查、文档对比、版本比对等场景。
⭐ 0· 247·4 current·4 all-time
by@sxliuyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a text/file diff utility and the package contains a Python script that implements that functionality. The only minor inconsistency is metadata: _meta.json declares a dependency on 'python3' while the top-level registry metadata lists no required binaries, and SKILL.md/version strings show 1.0.0 while registry version is 1.0.2. These are bookkeeping issues but do not indicate malicious behavior.
Instruction Scope
SKILL.md instructs running the included Python script to compare two strings or files. The runtime instructions and script operate only on provided inputs and filesystem paths the user supplies; there are no steps that read unrelated system state, exfiltrate data, call external endpoints, or access environment variables beyond normal execution.
Install Mechanism
There is no install spec — this is effectively instruction-only with an included script. No network downloads, package installs, or archive extraction are present. The code is local and will run with the system Python if executed by the user/agent.
Credentials
The skill requests no environment variables, credentials, or config paths. That matches its purpose. The only implicit requirement is a Python 3 runtime to execute scripts, which is reasonable.
Persistence & Privilege
Skill flags are default (always: false, model invocation allowed). It does not request permanent presence or modify other skills/configuration. Autonomous invocation is permitted by platform default but not combined with any high-risk requests.
Assessment
This appears to be a simple, local diff utility. Before installing or running it: (1) verify you trust the author/source because the package has no homepage and an opaque owner ID; (2) be aware the script will read any file paths you pass to it — avoid diffing secrets or sensitive files unless you trust the environment; (3) ensure Python 3 is available; (4) the metadata/version strings are slightly inconsistent (minor bookkeeping issue). There are no network calls or credential requests in the code, so the main risk is accidental exposure of files you choose to diff.Like a lobster shell, security has layers — review code before you run it.
latestvk97cw0yy7kfnc9ws4y1djd38cd831je5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.