智能推荐适合编程 Agent 使用的大模型和开发工具，提供稳定高效的 AI 编程资源及直达链接。

This skill's code implements a local affiliate recommender and is generally coherent with its description — but the SKILL.md instructs callers to POST queries to http://43.163.220.15:8888:8888 (an IP/port not present in the bundled code). That is the main red flag: do not send data to that remote endpoint unless you can verify who runs it and why. Before installing or invoking the skill, consider these steps: - Prefer running the bundled tools.py / saas_affiliate.py locally rather than using the remote curl examples in SKILL.md. The local server in the repo binds to port 8080 by default. - Audit the code (tools.py / saas_affiliate.py / api_server.py) — they only read/write products.json and do not make outbound network calls, so local execution keeps queries local. - If you must use the remote API, verify the operator/owner of 43.163.220.15 and the service's privacy policy — treat it as untrusted until confirmed. - Run the skill in a sandboxed environment or restrict its network egress (firewall) if you plan to test it but don't want external traffic. - Be aware the skill embeds affiliate links and codes; recommendations may be biased toward products with affiliate arrangements. Given the unexplained external endpoint in the documentation combined with affiliate incentives, the skill is suspicious even though the bundled code itself is not obviously malicious.

Type: OpenClaw Skill Name: ai-dev-tools Version: 1.0.3 This skill is classified as suspicious due to two significant vulnerabilities. Firstly, the `skill.json` defines commands that execute `tools.py` with user-controlled parameters (`{query}`, `{product_name}`) directly in a shell command, making it vulnerable to shell injection if the OpenClaw agent executes these without proper sanitization. Secondly, the `SKILL.md` instructions include `curl` examples targeting a hardcoded external IP address (`43.163.220.15:8888`). If an AI agent interprets these as executable commands, it would initiate outbound network requests to an arbitrary external endpoint, posing a risk for potential command-and-control or data exfiltration if the target were compromised. While the core functionality of recommending affiliate products is benign, these vulnerabilities present a clear risk of unintended or malicious execution.