用于自动扫描 Vue2 项目的潜在风险，依赖安全，Webpack 配置风险， Babel 配置问题

Skill 用于自动扫描 Vue2 项目的潜在风险，依赖安全，Webpack 配置风险， Babel 配置问题

This skill appears coherent and limited to scanning a Vue2 project. Before running it: (1) review the included scripts yourself (they're small and bundled) to satisfy yourself they only access project files; (2) run them in a sandbox or CI environment if you are cautious — they call npm audit and npm list which may perform network calls; (3) ensure npm/node are installed in the environment where you run it; (4) be aware of some simplistic checks (e.g., core-js version parsing) that can cause false positives. No credentials are requested and there are no hidden remote endpoints in the scripts.

Type: OpenClaw Skill Name: vue2-risk-scan Version: 1.0.0 The skill is a legitimate diagnostic tool designed to scan Vue2 projects for security and configuration risks. It uses shell scripts (scripts/checks/) to inspect local files like package.json, vue.config.js, and babel.config.js for vulnerable dependencies (e.g., axios) and insecure settings (e.g., production source maps). No evidence of malicious intent, data exfiltration, or unauthorized execution was found.