software-copyright

用于生成软件著作权申请相关文档的工具。当用户需要填写软件著作权登记表、生成软件说明书、创建技术文档、准备软著申请材料时使用。支持中国软件著作权登记所需的各类文档模板和信息收集。

This skill appears to do what it says: generate soft著 application forms, manuals, and a source-code checklist. Before using it: (1) Do not submit full confidential source code or secrets — only provide the minimal code excerpts required for registration (front/back pages), and redact any sensitive data or keys. (2) Expect the script to call pip to install python-docx if it's not present — run in a controlled Python environment or virtualenv if you prefer. (3) Review generated legal/technical statements for accuracy (the skill helps draft documents but is not a legal advisor). (4) If you need offline use, run the included scripts locally rather than pasting code into a web UI. Overall the package is coherent and proportionate to its stated purpose.

Type: OpenClaw Skill Name: software-copyright-doc-generator Version: 1.0.0 The skill bundle is designed to generate software copyright application documents but contains a high-risk implementation in `scripts/generate_docs.py`. Specifically, the script uses `os.system("pip install python-docx")` to automatically install missing dependencies, which is a shell execution vulnerability. While this behavior appears intended for user convenience rather than malice, the use of unvalidated shell commands to modify the system environment is a significant security risk. No evidence of data exfiltration or intentional backdoors was found.