python-code-analyz

专业Python代码分析与优化，支持语法检查、安全扫描、性能评估、复杂度分析及重构后的优化代码生成。

This skill appears coherent with its stated purpose (static Python analysis and auto-refactoring) and doesn't ask for credentials or download code from arbitrary URLs. Before installing or running: 1) Inspect the remaining parts of analyzer.py (the provided snippet was truncated) to confirm there are no hidden network calls or file exfiltration; 2) Run the tool in a sandboxed environment or container first; 3) Do not run publish.sh unless you intend to publish and have the ClawHub CLI and account — it requires a logged-in user and will call clawhub publish; 4) Treat example code that includes hardcoded API keys as purely illustrative and never copy such secrets into real projects. If you want, I can fully scan the remaining parts of analyzer.py (provide the truncated portion) or run a targeted static check for network/subprocess/file-write patterns.

Type: OpenClaw Skill Name: python-code-analyz Version: 1.0.0 The 'Code Analyzer' skill is a legitimate static analysis tool designed to identify security vulnerabilities, performance issues, and code quality smells in Python code. The core logic in `analyzer.py` uses the standard `ast` module to parse code and detect risks such as SQL injection, command injection, and hardcoded secrets without executing the analyzed code or performing unauthorized network/file operations. The bundle's documentation (SKILL.md, README.md) and supporting scripts (publish.sh, example.py) are consistent with its stated purpose of providing automated code reviews and optimization suggestions.