Security audit
Security checks for vulnerabilities and agentic risk
This is a static Chinese-language cost guide with example model pricing and configuration snippets, and it does not add hidden execution, persistence, or data-transfer behavior.
Installers should treat this as a Chinese-language pricing/configuration reference. Verify current model prices before relying on the calculations, and only place real API keys into trusted OpenClaw configuration files.
The manifest description and the full markdown instructions are presented only in Chinese, which effectively forces a specific language on users. The file does not offer multilingual support, opt-in language selection, or explain that the skill is intended exclusively for a Chinese-speaking or region-specific audience.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
providers:
deepseek:
apiKey: "sk-xxx"
baseUrl: "https://api.deepseek.com/v1"
zhipu:
apiKey: "xxx"
The manifest description is written entirely in Chinese and the keywords include "chinese", indicating a language-specific presentation. There is no accompanying note that the skill is optional for Chinese users only, nor any indication that users can choose another language, which can conflict with language/locale policy expectations.
No suspicious patterns detected.