OpenClaw Self Analyzer - 自分析工具

自动分析OpenClaw架构，检测钩子点，生成钩子代码，扫描代码并生成详细分析报告。

This package appears coherent with its description: it scans an OpenClaw installation and workspace, generates a JSON/Markdown report and example JS hooks. Before running or deploying generated hooks: (1) run in an isolated environment if possible because the scripts read many files under the OpenClaw install and may log context data, (2) review generated hook code for any logic you don't expect before installing them into a live OpenClaw instance, (3) update the hardcoded paths if your OpenClaw is installed elsewhere, and (4) avoid running it as a privileged account unless necessary. No credentials or network endpoints are requested by the skill itself.

Type: OpenClaw Skill Name: openclaw-self-analyzer Version: 1.0.0 The OpenClaw Self Analyzer skill is designed to analyze the OpenClaw architecture, identify hook points, and generate boilerplate code for custom hooks and reports. All scripts (`run.sh`, `core/architecture_analyzer.py`, `generators/hook_generator.py`, `reporters/report_generator.py`, `scanners/code_scanner.py`) operate within the expected OpenClaw installation and workspace directories (`/root/.nvm/.../openclaw` and `/root/.openclaw/workspace/`), reading and writing files locally. While the `generators/hook_generator.py` inserts a `logic` string directly into generated JavaScript, in this skill bundle, this string is either a benign `console.log` statement or a placeholder, indicating a potential vulnerability in the code generation design rather than an intentional malicious act. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the agent.