← 返回 Skills 市场

Security Scanner Pro

Name: Security Scanner Pro
Author: dht9898-cell

作者 dht9898-cell · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

204

总下载

当前安装

版本数

在 OpenClaw 中安装

/install security-scanner-pro

功能描述

安全扫描器 - 智能合约和 DApp 安全分析

使用说明 (SKILL.md)

security-scanner

安全扫描器 - 智能合约和 DApp 安全分析

价格：$400 USDC

功能特性

自动化执行，7x24 小时运行
API 集成，支持主流平台
配置灵活，易于定制
实时监控，自动优化

安装方式

clawhub install security-scanner

使用示例

详见文档

收益潜力

预期月收益：$800-$((400 * 4))
回本周期：1-2 个月
边际成本：几乎为零

安全使用建议

This listing appears incomplete and inconsistent. Do not install or grant any credentials yet. Ask the publisher for: (1) source code or a release URL for the scanner binary; (2) a clear install specification and what 'clawhub install' does; (3) a list of required environment variables and why they are needed (e.g., RPC endpoints, API keys, wallet access); (4) proof that the service runs on reputable infrastructure. If the publisher cannot supply verifiable code or a trusted install origin, avoid using this skill. Never provide private keys, API secrets, or wallet credentials to this skill until you can review the implementation and confirm the install source.

能力评估

⚠ Purpose & Capability

The name/description promise a 24/7 automated smart-contract/DApp scanner with API integrations and real-time monitoring, but the skill is instruction-only with no code, no install spec, and no declared credentials or endpoints. Requesting only 'curl' as a required binary is inadequate for the claimed functionality; the listing claims integrations but provides no mechanism or required keys to access external services.

ℹ Instruction Scope

SKILL.md contains only marketing-like content, an example install command (clawhub install security-scanner), and pricing; it does not include concrete runtime instructions, commands to call external APIs, nor steps that access user files or environment variables. Because the instructions are minimal, there is no explicit data-exfiltration behavior, but the lack of operational detail makes it impossible to verify the scanner actually performs the claimed tasks.

ℹ Install Mechanism

There is no install specification or code — this is an instruction-only listing. That reduces the immediate risk of arbitrary code being downloaded, but the provided install command references 'clawhub' with no accompanying implementation or source. The absence of an install artifact means the listing is incomplete or a stub.

⚠ Credentials

The registry metadata sets primary credential to 'bash' (not an environment variable or credential) and declares no required env vars, yet the skill claims API integration. A real scanner integrating with blockchains or third-party services would normally require RPC endpoints, API keys, or wallet credentials. This mismatch is disproportionate and unclear — either the skill is incomplete or it's omitting required secrets.

✓ Persistence & Privilege

The skill does not request always:true, does not declare config paths, and has no install-time persistence. Autonomous invocation is allowed (platform default), but there is no evidence here of elevated or persistent privileges beyond the normal platform behavior.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install security-scanner-pro
安装完成后，直接呼叫该 Skill 的名称或使用 /security-scanner-pro 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of security-scanner: - Automated smart contract & DApp security analysis tool - 24/7 operation with real-time monitoring and auto-optimization - API integration for major platforms - Flexible and easily customizable configuration - Simple installation via Clawhub - Transparent pricing and clear ROI potential

元数据

Slug security-scanner-pro

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题