Skill Analyzer

Analyzes OpenClaw skills for functionality, security, usability, documentation, maintainability, and best practices to provide quality scores and improvement...

This skill is internally coherent (a Python tool that analyzes skills) but exercise caution before running it on important data. Key points: - The analyzer is pure-Python and requests no secrets or installs, which reduces risk of exfiltration, but you should still inspect scripts/analyzer.py before executing. - The analyzer contains logic bugs: scoring math is inconsistent with the documented 0-10 scale (the code scales to 0-100), and the risk-assessment function is truncated (an unfinished 'ret' token) which will likely crash or misreport risk. Expect unreliable/misleading results until those are fixed. - The security checks are heuristic: secret detection and eval/exec detection are simplistic and can miss issues or generate false positives. Do not rely solely on its output for security-critical decisions. - Recommended actions: (1) manually review scripts/analyzer.py for the truncated function and other logic issues, (2) run it first in an isolated/sandbox environment and against non-sensitive test skills, (3) if you plan to use its reports for decisions, validate a few results manually and consider improving its heuristics before trusting its risk scores. If you want, I can list the specific buggy code locations and suggest precise fixes to make the analyzer safer and more accurate.

Type: OpenClaw Skill Name: skill-analyzer Version: 0.2.0 The 'skill-analyzer' is a static analysis utility designed to evaluate the quality and security of other OpenClaw skills. The core logic in 'scripts/analyzer.py' performs local file system checks for hardcoded secrets, unsafe coding patterns (like dangerous use of eval/exec), and documentation completeness without executing the target code or making network requests. No evidence of data exfiltration, persistence, or malicious intent was found.