数安云智数据分类分级

数安云智数据分类分级同步接口 - 用于批量处理字段信息的分类分级。支持敏感数据识别、数据分类、数据分级等功能。使用前需配置API地址和认证密钥。

This skill appears to be a straightforward client for a local/remote data-classification API, but check a few practical things before installing: - Confirm the API_URL you intend to use (the defaults and the skill homepage point to localhost; ensure you set SHUYAN_API_URL to the correct service and not a public endpoint you don't control). - Protect the API key: avoid storing long-lived keys in plain text if possible; if you store the key in ~/.openclaw/openclaw.json be aware that this is local plaintext configuration. Prefer environment variables or short-lived credentials. - Verify the data you will send — sampleList and other fields can contain personal data; ensure you comply with your data-handling policies before sending real PII to the configured endpoint. - The Python script requires the 'requests' package and contains a bug: the health command references 'ShucanClassifier' (typo) and will fail; if you plan to use the Python CLI, either patch that line to use ShuyanClassifier or rely on the shell script. - Consider scoping the API key (least privilege) and rotating it regularly. If you want, I can produce a patched version of the Python script fixing the health-check typo and add a small README note to declare SHUYAN_API_URL as a required env var.

Type: OpenClaw Skill Name: shuyan-data-classification Version: 1.0.1 The skill bundle is classified as suspicious due to a JSON injection vulnerability in the `shuyan-classify.sh` script. User-provided arguments (`$colNameCh`, `$colNameComment`, etc.) are directly embedded into a JSON string without proper escaping, allowing an attacker to inject arbitrary JSON key-value pairs or malform the request sent to the local API. While the Python script (`shuyan_classify.py`) correctly handles JSON serialization, and the default API endpoint is `http://localhost:8080` (local), this vulnerability in the shell script could lead to unintended data manipulation or errors on the target API.