← 返回 Skills 市场
Shield Cn
作者
onlyloveher
· GitHub ↗
· v2284.0.0
· MIT-0
425
总下载
0
收藏
2
当前安装
1294
版本数
在 OpenClaw 中安装
/install shield-cn
功能描述
CN本地化安全防护技能。针对中文场景设计的安全加固方案,防御prompt注入、数据泄露、凭证泄漏,支持钉钉/飞书/微信等国内平台的安全检测。
安全使用建议
This skill appears to do what it claims — local scanning and interactive guarding for Chinese scenarios — but it operates on files you point it at and writes logs/reports to your home directory. Before installing/running: 1) inspect the scripts (they're small and included) and run them in a test/sandbox workspace first; 2) avoid scanning your entire filesystem or running as root (the auditor will happily walk whatever directory you give it); 3) be aware reports may contain short redacted snippets of matched secrets (first ~20 chars + '***') and those will be stored in reports/logs — remove or secure reports if needed; 4) verify the upstream repository/author if you require provenance; and 5) if you want to integrate into production agents, review/adjust default rules, whitelists, and log storage locations to match your security policy.
功能分析
Type: OpenClaw Skill
Name: shield-cn
Version: 2284.0.0
The 'shield-cn' skill is a localized security toolkit designed to protect AI agents in Chinese-language environments. It provides scripts for auditing local workspaces for exposed credentials (security-audit.py) and monitoring user inputs for prompt injection or phishing attempts (shield-guard.py). The implementation relies on standard Python libraries for local file scanning and regex-based detection, with no evidence of data exfiltration, network communication, or malicious intent.
能力评估
Purpose & Capability
Name/description (CN-focused prompt-injection, credential and data-leak protection) match the included scripts and docs. The repo provides a scanner (security-audit.py) and a runtime guard (shield-guard.py) whose behaviors align with the stated goals; there are no unrelated environment variables, binaries, or cloud credentials demanded.
Instruction Scope
SKILL.md instructs running the provided local Python scripts to scan the workspace and to run a guard loop that inspects user inputs. The tools legitimately read local files (workspace tree, AGENTS.md, MEMORY.md) and write reports/logs. Note: the auditor scans for secret patterns and includes a redacted snippet (first ~20 chars + '***') in findings and reports — those partial snippets may appear in generated reports/log files. The guard writes logs under the user's home (~/.openclaw/logs/shield-cn). There are no network exfiltration calls or hidden remote endpoints in the provided code.
Install Mechanism
No install spec or remote downloads; this is instruction + local Python scripts. Nothing in the files downloads or executes code from external URLs. Risk is limited to running local Python scripts the user installs/executes.
Credentials
The skill requests no environment variables or credentials. It scans for many cloud-provider credential patterns and for common credential file paths (e.g., ~/.aliyun, ~/.tccli) which is coherent for a credential-protection tool. It does create and write logs under the user's home directory.
Persistence & Privilege
The skill is not force-enabled (always:false) and does not modify other skills or system-wide configs. It persists logs under ~/.openclaw and can be run interactively or as a service by the user; it does not elevate privileges or inject itself into other skills.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install shield-cn - 安装完成后,直接呼叫该 Skill 的名称或使用
/shield-cn触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2284.0.0
- No file changes detected in this version.
- Functionality, features, and documentation remain unchanged from the previous release.
v2281.0.0
No file changes detected in this version.
- No updates or modifications were made to the code or documentation.
- This release maintains all features and behavior from the previous version.
v2008.0.0
No changes detected in this version.
v2007.0.0
No file changes detected in this version.
- No updates or modifications were made to any files.
- Skill functionality and documentation remain unchanged from the previous version.
v2005.0.0
No changes detected in this version.
- Version 2005.0.0 does not include any file updates or documentation changes.
- All features, documentation, and configurations remain the same as the previous version.
v2003.0.0
No file or documentation changes detected in this release.
- No updates or modifications have been made to the skill in version 2003.0.0.
- All functionality, configuration, and documentation remain the same as the previous version.
v2004.0.0
No file changes were detected for this version.
- No updates have been made; this release contains no changes from the previous version.
v2002.0.0
No changes detected in this release.
- Version number increased to 2002.0.0, but no file or feature changes were identified.
- No impact on users; functionality remains unchanged.
v2006.0.0
No changes detected in this version.
- No updates or modifications were made to the skill files or documentation.
- Version number update only; functionality and content remain the same.
v1284.0.0
No changes detected in this version (1284.0.0).
- No file changes were found compared to the previous version.
- No updates or modifications introduced.
v2001.0.0
- No changes detected in this version.
- Version and documentation remain the same as the previous release.
v2000.0.0
No file changes detected in this release.
- No updates, code changes, or documentation modifications were found between the previous and current versions.
- Version bump only; all features and behavior remain consistent with the previous release.
v1283.0.0
No file or content changes detected in this version.
- Version bumped to 1283.0.0
- No updates or modifications made to the skill files or documentation.
v1282.0.0
- No changes detected in this version.
- The SKILL.md and other files remain unchanged from the previous release.
v1281.0.0
No file changes detected in this version.
- Version number has incremented to 1281.0.0, but no content or code changes are present.
- Skill features and documentation remain identical to the previous release.
- No impact to users; behavior and functionality unchanged.
v1280.0.0
- No file changes were detected in this release.
- Version number updated to 1280.0.0.
- No new features, bug fixes, or documentation updates included.
v1279.0.0
No changes detected in files for version 1279.0.0.
- No code or documentation updates present in this release.
- Skill version updated without content modifications.
v1278.0.0
No file or content changes detected in this version.
- Version 1278.0.0 released with no modifications from the previous version.
- No updates to code, configuration, or documentation.
- Behavior and features remain unchanged from the prior release.
v1277.0.0
- No changes detected in this version (1277.0.0); all files, features, and documentation remain unchanged.
v1276.0.0
No file changes detected for version 1276.0.0.
There are no new updates or modifications in this release.
元数据
常见问题
Shield Cn 是什么?
CN本地化安全防护技能。针对中文场景设计的安全加固方案,防御prompt注入、数据泄露、凭证泄漏,支持钉钉/飞书/微信等国内平台的安全检测。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 425 次。
如何安装 Shield Cn?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shield-cn」即可一键安装,无需额外配置。
Shield Cn 是免费的吗?
是的,Shield Cn 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Shield Cn 支持哪些平台?
Shield Cn 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Shield Cn?
由 onlyloveher(@onlyloveher)开发并维护,当前版本 v2284.0.0。
推荐 Skills