awesome-openclaw-skills-zh

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. 这不是单一、边界清晰的技能,而是一个聚合索引,核心行为是引导用户继续安装和授权更多远程技能。文档中的凭据占位符本身不恶意,但安装示例与官方文档不一致、跨大量高权限服务、并存在技能到技能的信任链扩张,因此整体风险中等偏高。

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:50 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fawesome-openclaw-skills-zh%2F@a782aa776fc0b110b954515c7b93797b22fc95b553d8b2bdac6e085f797fe503
Security Audit — socket — awesome-openclaw-skills-zh