← 返回 Skills 市场
onlyloveher

Shield Cn

作者 onlyloveher · GitHub ↗ · v2284.0.0 · MIT-0
cross-platform ✓ 安全检测通过
425
总下载
0
收藏
2
当前安装
1294
版本数
在 OpenClaw 中安装
/install shield-cn
功能描述
CN本地化安全防护技能。针对中文场景设计的安全加固方案,防御prompt注入、数据泄露、凭证泄漏,支持钉钉/飞书/微信等国内平台的安全检测。
安全使用建议
This skill appears to do what it claims — local scanning and interactive guarding for Chinese scenarios — but it operates on files you point it at and writes logs/reports to your home directory. Before installing/running: 1) inspect the scripts (they're small and included) and run them in a test/sandbox workspace first; 2) avoid scanning your entire filesystem or running as root (the auditor will happily walk whatever directory you give it); 3) be aware reports may contain short redacted snippets of matched secrets (first ~20 chars + '***') and those will be stored in reports/logs — remove or secure reports if needed; 4) verify the upstream repository/author if you require provenance; and 5) if you want to integrate into production agents, review/adjust default rules, whitelists, and log storage locations to match your security policy.
功能分析
Type: OpenClaw Skill Name: shield-cn Version: 2284.0.0 The 'shield-cn' skill is a localized security toolkit designed to protect AI agents in Chinese-language environments. It provides scripts for auditing local workspaces for exposed credentials (security-audit.py) and monitoring user inputs for prompt injection or phishing attempts (shield-guard.py). The implementation relies on standard Python libraries for local file scanning and regex-based detection, with no evidence of data exfiltration, network communication, or malicious intent.
能力评估
Purpose & Capability
Name/description (CN-focused prompt-injection, credential and data-leak protection) match the included scripts and docs. The repo provides a scanner (security-audit.py) and a runtime guard (shield-guard.py) whose behaviors align with the stated goals; there are no unrelated environment variables, binaries, or cloud credentials demanded.
Instruction Scope
SKILL.md instructs running the provided local Python scripts to scan the workspace and to run a guard loop that inspects user inputs. The tools legitimately read local files (workspace tree, AGENTS.md, MEMORY.md) and write reports/logs. Note: the auditor scans for secret patterns and includes a redacted snippet (first ~20 chars + '***') in findings and reports — those partial snippets may appear in generated reports/log files. The guard writes logs under the user's home (~/.openclaw/logs/shield-cn). There are no network exfiltration calls or hidden remote endpoints in the provided code.
Install Mechanism
No install spec or remote downloads; this is instruction + local Python scripts. Nothing in the files downloads or executes code from external URLs. Risk is limited to running local Python scripts the user installs/executes.
Credentials
The skill requests no environment variables or credentials. It scans for many cloud-provider credential patterns and for common credential file paths (e.g., ~/.aliyun, ~/.tccli) which is coherent for a credential-protection tool. It does create and write logs under the user's home directory.
Persistence & Privilege
The skill is not force-enabled (always:false) and does not modify other skills or system-wide configs. It persists logs under ~/.openclaw and can be run interactively or as a service by the user; it does not elevate privileges or inject itself into other skills.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install shield-cn
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /shield-cn 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2284.0.0
- No file changes detected in this version. - Functionality, features, and documentation remain unchanged from the previous release.
v2281.0.0
No file changes detected in this version. - No updates or modifications were made to the code or documentation. - This release maintains all features and behavior from the previous version.
v2008.0.0
No changes detected in this version.
v2007.0.0
No file changes detected in this version. - No updates or modifications were made to any files. - Skill functionality and documentation remain unchanged from the previous version.
v2005.0.0
No changes detected in this version. - Version 2005.0.0 does not include any file updates or documentation changes. - All features, documentation, and configurations remain the same as the previous version.
v2003.0.0
No file or documentation changes detected in this release. - No updates or modifications have been made to the skill in version 2003.0.0. - All functionality, configuration, and documentation remain the same as the previous version.
v2004.0.0
No file changes were detected for this version. - No updates have been made; this release contains no changes from the previous version.
v2002.0.0
No changes detected in this release. - Version number increased to 2002.0.0, but no file or feature changes were identified. - No impact on users; functionality remains unchanged.
v2006.0.0
No changes detected in this version. - No updates or modifications were made to the skill files or documentation. - Version number update only; functionality and content remain the same.
v1284.0.0
No changes detected in this version (1284.0.0). - No file changes were found compared to the previous version. - No updates or modifications introduced.
v2001.0.0
- No changes detected in this version. - Version and documentation remain the same as the previous release.
v2000.0.0
No file changes detected in this release. - No updates, code changes, or documentation modifications were found between the previous and current versions. - Version bump only; all features and behavior remain consistent with the previous release.
v1283.0.0
No file or content changes detected in this version. - Version bumped to 1283.0.0 - No updates or modifications made to the skill files or documentation.
v1282.0.0
- No changes detected in this version. - The SKILL.md and other files remain unchanged from the previous release.
v1281.0.0
No file changes detected in this version. - Version number has incremented to 1281.0.0, but no content or code changes are present. - Skill features and documentation remain identical to the previous release. - No impact to users; behavior and functionality unchanged.
v1280.0.0
- No file changes were detected in this release. - Version number updated to 1280.0.0. - No new features, bug fixes, or documentation updates included.
v1279.0.0
No changes detected in files for version 1279.0.0. - No code or documentation updates present in this release. - Skill version updated without content modifications.
v1278.0.0
No file or content changes detected in this version. - Version 1278.0.0 released with no modifications from the previous version. - No updates to code, configuration, or documentation. - Behavior and features remain unchanged from the prior release.
v1277.0.0
- No changes detected in this version (1277.0.0); all files, features, and documentation remain unchanged.
v1276.0.0
No file changes detected for version 1276.0.0. There are no new updates or modifications in this release.
元数据
Slug shield-cn
版本 2284.0.0
许可证 MIT-0
累计安装 2
当前安装数 2
历史版本数 1294
常见问题

Shield Cn 是什么?

CN本地化安全防护技能。针对中文场景设计的安全加固方案,防御prompt注入、数据泄露、凭证泄漏,支持钉钉/飞书/微信等国内平台的安全检测。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 425 次。

如何安装 Shield Cn?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install shield-cn」即可一键安装,无需额外配置。

Shield Cn 是免费的吗?

是的,Shield Cn 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Shield Cn 支持哪些平台?

Shield Cn 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Shield Cn?

由 onlyloveher(@onlyloveher)开发并维护,当前版本 v2284.0.0。

💬 留言讨论