← 返回 Skills 市场
xyezir

OC Full Ops Audit Recipe

作者 xyezir · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
400
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install oc-full-ops-audit-recipe
功能描述
End-to-end OpenClaw audit and remediation recipe for gateway, channels, nodes, security, and memory sync.
安全使用建议
This skill is a coherent, high-level audit recipe and appears benign, but it is intentionally vague about two important things: making changes and where results are stored. Before installing or running it, confirm: (1) where 'daily memory' and 'shared memory' live, who can read them, how long entries are retained, and whether outputs will be redacted to avoid leaking secrets; (2) that the agent will require and request explicit, itemized approval before performing any disruptive fixes, and that any credentials needed for remediation are managed and consented to separately; (3) that rollback points and verification steps are implemented so changes can be safely reverted. If you want a safer baseline, restrict this skill to read-only checks until remediation procedures, credential handling, and memory/retention policies are explicitly documented.
功能分析
Type: OpenClaw Skill Name: oc-full-ops-audit-recipe Version: 0.1.0 The skill bundle is classified as suspicious due to the broad and high-privilege instructions given to the AI agent in `SKILL.md`. While lacking explicit malicious intent, the instructions to 'Apply fixes' and perform 'remediation' across 'gateway, channels, nodes, security, and memory sync' grant the agent significant modification capabilities. This represents a high-risk operation, as an agent executing such commands could potentially cause disruptive changes or unintended side effects if not perfectly constrained, even with the stated safeguards like 'explicit approval'.
能力评估
Purpose & Capability
Name and description describe an end-to-end audit recipe and the SKILL.md contains a concise, matching workflow (baseline, classify, apply fixes, re-check, document). There are no extra binaries, env vars, or installs that would be unexpected for this purpose.
Instruction Scope
The instructions are high-level and remain within the scope of an audit recipe. However, two steps need clarification: (1) 'Apply fixes in risk order with rollback points' implies performing potentially disruptive actions but provides no guardrails, required credentials, or explicit approval step; (2) 'Write outcomes to daily memory + shared memory' instructs persistence of results but does not define what memory stores are, retention, or redaction rules. Both are scope-expanding details that should be explicit.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk install profile. Nothing will be written or fetched by an installer during skill installation.
Credentials
The skill declares no required environment variables or credentials, which is consistent with a read-only audit. However, because it instructs applying fixes (which typically require elevated credentials) and writing results to shared memory, the absence of declared credential requirements is a gap — any implementation that actually performs fixes will need credentials that aren't described here.
Persistence & Privilege
always:false and user-invocable:true are appropriate. Still, the SKILL.md explicitly directs writing outcomes to persistent 'daily memory' and 'shared memory', which could cause retention of sensitive audit findings. Combine that with the platform's default autonomous invocation and you should confirm memory access controls, retention, and whether the skill will ask for explicit approval before making changes.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install oc-full-ops-audit-recipe
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /oc-full-ops-audit-recipe 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release (sanitized)
元数据
Slug oc-full-ops-audit-recipe
版本 0.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

OC Full Ops Audit Recipe 是什么?

End-to-end OpenClaw audit and remediation recipe for gateway, channels, nodes, security, and memory sync. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 400 次。

如何安装 OC Full Ops Audit Recipe?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install oc-full-ops-audit-recipe」即可一键安装,无需额外配置。

OC Full Ops Audit Recipe 是免费的吗?

是的,OC Full Ops Audit Recipe 完全免费(开源免费),可自由下载、安装和使用。

OC Full Ops Audit Recipe 支持哪些平台?

OC Full Ops Audit Recipe 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 OC Full Ops Audit Recipe?

由 xyezir(@xyezir)开发并维护,当前版本 v0.1.0。

💬 留言讨论