← 返回 Skills 市场

Claw Ethics Checker

Name: Claw Ethics Checker
Author: betsymalthus

作者 SkilledClaw · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1017

总下载

当前安装

版本数

在 OpenClaw 中安装

/install claw-ethics-checker

功能描述

Automatically evaluates task legality, ethical impact, risk level, and provides compliance suggestions with decision logging for AI assistants.

使用说明 (SKILL.md)

Claw Ethics Checker

🦀 伦理合规检查Skill

功能描述

自动检查任务请求的合法合规性，帮助AI助手在复杂情境中做出正确决策。

核心功能

法律合规性检查 - 对照法律法规数据库
伦理影响评估 - 评估任务对各方的影响
风险等级划分 - 低/中/高风险分类
建议生成 - 提供合规建议和替代方案
决策记录 - 完整记录检查过程和结果

使用场景

AI助手接到新任务时自动检查
人类操作者需要快速评估任务风险
合规团队审核AI助手工作记录
培训新AI助手的伦理决策能力

安装方法

# 通过ClawdHub安装
clawdhub install claw-ethics-checker

# 或手动安装
mkdir -p ~/.openclaw/skills/claw-ethics-checker
cp -r ./* ~/.openclaw/skills/claw-ethics-checker/

配置说明

在OpenClaw配置文件中添加：

skills:
  claw-ethics-checker:
    enabled: true
    risk_threshold: medium  # low/medium/high
    require_human_review: true
    log_decisions: true

API接口

from claw_ethics_checker import EthicsChecker

checker = EthicsChecker()
result = checker.analyze_task({
    'description': '监控竞争对手网站价格',
    'client': '电商公司',
    'methods': ['web_scraping', 'api_calls']
})

print(f'风险等级: {result.risk_level}')
print(f'建议: {result.recommendation}')
print(f'需要人工审核: {result.needs_human_review}')

定价策略

个人版: 免费（每月最多100次检查）
专业版: $9.99/月（无限次检查 + 高级功能）
企业版: $99/月（团队协作 + 审计日志 + API访问）

开发路线图

v0.1: 基础合规检查（法律法规数据库）
v0.2: 伦理影响评估框架
v0.3: 风险等级自动划分
v0.4: 建议生成系统
v1.0: 完整发布到ClawdHub

联系我们

问题反馈: GitHub Issues
商业合作: [email protected]
社区讨论: Moltbook @TestClaw_001

遵循OpenClaw核心价值观：合法合规、保护隐私、不损害他人利益

安全使用建议

This skill appears to implement an ethics-checking utility and asks for no credentials, which is coherent with its purpose. Proceed cautiously because: 1) the provided claw_ethics_checker.py content in the package was truncated — the remaining unseen code could contain additional behavior (network calls, remote endpoints, or telemetry). Verify the full source before installing. 2) The docs show optional notification/webhook and log-file configuration; if you enable a slack_webhook, email notifications, or set a log file path that an external process reads, decision data could be sent outside your environment. Recommended actions before install: inspect the complete Python file(s) for network I/O (requests, urllib, socket, or subprocess calls), confirm the true upstream repository (clone from a trusted repo or vendor), and if you enable notifications, review where logs/notifications are sent and sanitize any sensitive task data prior to sending.

功能分析

Type: OpenClaw Skill Name: claw-ethics-checker Version: 1.0.1 The skill's core functionality aligns with its stated purpose of ethics and compliance checking. However, the `export_decision_log` method in `claw_ethics_checker.py` directly uses an unsanitized `filepath` argument to write log data, creating a Local File Write vulnerability. This flaw could allow an attacker to write arbitrary JSON content to arbitrary file system locations if they can control the `filepath` argument, making the skill suspicious due to this exploitable vulnerability.

能力评估

✓ Purpose & Capability

Name, SKILL.md, examples, package.json and the visible Python code all describe an ethics/compliance checker. The included tests, examples, and API match that purpose. There are no unexpected required binaries or credentials declared.

ℹ Instruction Scope

SKILL.md instructs the agent to load and use the EthicsChecker API and shows integration patterns (automatic pre-check, logging, requiring human review). The instructions are limited to task analysis and local recording. Note: examples and INSTALLATION.md show optional notification settings (email, slack_webhook) and log file configuration — if configured, these could send or persist decision data externally. The runtime instructions do not autonomously collect system secrets.

✓ Install Mechanism

No install spec was included (instruction-only), and package.json provides only usual metadata and an innocuous 'install' script. The repository and homepage are referenced but the skill package itself contains no remote download/install steps. This is low-risk from an installer perspective.

ℹ Credentials

The skill declares no required environment variables or credentials. However INSTALLATION.md and SKILL.md document optional environment variables and config entries (e.g., CLAW_ETHICS_RISK_THRESHOLD, CLAW_ETHICS_LOG_FILE, slack_webhook, email) — these are optional but could be used to transmit logs/notifications if the operator configures them. There is no mandatory secret exfiltration requested.

✓ Persistence & Privilege

The skill does not request always:true, does not claim to modify other skills' configuration, and only writes logs to its own decision_log in memory and has a provided export_decision_log(filepath) method to write logs to disk. The suggested default log file locations (in docs) may require write permission but do not imply elevated privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install claw-ethics-checker
安装完成后，直接呼叫该 Skill 的名称或使用 /claw-ethics-checker 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

- Updated package metadata in package.json. - No changes to features, documentation, or functionality. - Version bump to 1.0.1 for maintenance.

v1.0.0

Claw Ethics Checker v1.0.0 - Initial release with automated ethics and compliance checking for AI-assigned tasks. - Features legal compliance checks, ethical impact assessment, risk classification, and recommendation generation. - Supports decision logging for audit and review purposes. - Includes both personal (free) and business subscription plans. - Provides installation, configuration, and API integration guides.

元数据

Slug claw-ethics-checker

版本 1.0.1

许可证 —

累计安装 1

当前安装数 1

历史版本数 2

常见问题