← 返回 Skills 市场
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-auditor-plus
功能描述
Security, performance, and quality auditing for AgentSkills. Use when reviewing skills before installation, auditing during development, checking installed s...
安全使用建议
This package appears to be what it says: a local auditing tool implemented as two Python scripts plus documentation. Before installing or running it: (1) inspect the two scripts yourself to confirm they only read files under the target skill directory (they do), (2) run them on non-sensitive test skills first to understand false positives/negatives, (3) be aware the auditors use simple regex heuristics and may miss complex leaks or flag benign patterns, and (4) note the opinionated recommendations (e.g., removing README.md) — adapt thresholds/policies to your environment before applying fixes automatically or in CI.
功能分析
Type: OpenClaw Skill
Name: skill-auditor-plus
Version: 1.0.0
The skill bundle is a legitimate security and performance auditing tool for AgentSkills. It provides Python scripts (security_audit.py and performance_audit.py) that perform static analysis on other skill directories to identify dangerous patterns, hardcoded credentials, and token usage inefficiencies. The code logic is transparent, lacks network exfiltration or unauthorized execution capabilities, and the documentation (SKILL.md and best-practices.md) actively promotes secure development and resource optimization.
能力标签
能力评估
Purpose & Capability
Name, description, and included scripts (security_audit.py, performance_audit.py) align with an auditing tool. The skill does not request unrelated credentials, binaries, or system paths that would be out of scope for an auditor. One minor design choice: the performance auditor flags common files like README.md as 'unnecessary', which is an opinionated policy rather than a security mismatch.
Instruction Scope
SKILL.md instructs running the two bundled Python auditors against skill directories and integrating them into CI. The runtime instructions do not attempt to read system secrets or contact external endpoints. Note: the auditors use regex heuristics (and try to skip matches inside comments/code blocks) which may produce false negatives/positives; also the performance auditor's 'remove README.md' recommendation is aggressive and may be undesirable for some projects.
Install Mechanism
No install spec is provided (instruction-only plus bundled scripts). That is the lowest-risk install model: nothing is downloaded or written during install. The skill includes local Python scripts which run locally when invoked.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. The scripts scan files for hardcoded credentials but do not request or require external secrets or cloud credentials to function.
Persistence & Privilege
always is false and the skill does not request persistent system presence or modify other skills. It does not attempt to enable itself or write agent-wide configurations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-auditor-plus - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-auditor-plus触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of Skill Auditor Plus, an automated auditing tool for AgentSkills.
- Provides automated security, performance, and quality audits for AgentSkills.
- Scans for dangerous operations, credential leaks, token bloat, and best practices violations.
- Offers severity levels for security issues and actionable advice in audit reports.
- Includes scripts for running audits before installation, during development, or in batch for installed skills.
- Supplies performance metrics (token counts, line counts) and recommendations for optimization.
- Offers guidelines for customization, troubleshooting, and integration with CI/CD pipelines.
- Ships with comprehensive documentation and best practices references.
元数据
常见问题
skill-auditor-plus 是什么？
Security, performance, and quality auditing for AgentSkills. Use when reviewing skills before installation, auditing during development, checking installed s... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 82 次。
如何安装 skill-auditor-plus？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-auditor-plus」即可一键安装，无需额外配置。
skill-auditor-plus 是免费的吗？
是的，skill-auditor-plus 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
skill-auditor-plus 支持哪些平台？
skill-auditor-plus 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 skill-auditor-plus？
由 caleb（@caleb-niu007）开发并维护，当前版本 v1.0.0。
推荐 Skills