← 返回 Skills 市场
VeridicusScan MCP Analyst
作者
sabaaziz991-hash
· GitHub ↗
· v0.1.5
· MIT-0
289
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install veridicusscan-mcp-analyst
功能描述
Use when the user wants to inspect a prompt, local file, or public HTTPS URL with VeridicusScan through its MCP bridge, triage prompt-injection or hidden-ins...
安全使用建议
This skill appears coherent for use with a local VeridicusScan MCP bridge. Before installing or invoking it: (1) Confirm your client/runtime provides a local MCP bridge and that you trust that process — the skill will direct prompts/files to that bridge for scanning. If the bridge is remote or managed by a third party, sensitive data could leave your environment. (2) Ensure you understand how the client discovers/authenticates the MCP bridge (the skill itself declares no credentials). (3) Note that allow_implicit_invocation may let the agent suggest this skill automatically — if you want explicit consent for every use, review platform invocation policies. If you need, provide the MCP bridge's connection details or the client's documentation so the skill can be evaluated in context.
功能分析
Type: OpenClaw Skill
Name: veridicusscan-mcp-analyst
Version: 0.1.5
The VeridicusScan MCP Analyst skill is a security-focused tool designed to scan URLs, files, and prompts for threats and implement runtime-defense guardrails (e.g., tool scoping and plan guarding). The skill includes explicit security features such as blocking non-public network URLs to prevent SSRF and provides structured workflows for triage and reporting. No evidence of malicious intent, data exfiltration, or unauthorized execution was found across the SKILL.md, agents/openai.yaml, or references/mcp-methods.md files.
能力评估
Purpose & Capability
The name/description (MCP analyst for VeridicusScan) aligns with the instructions: methods like scan_url, scan_file, scan_text, and runtime-defense flows are all relevant and expected. The skill does not request unrelated credentials, binaries, or system paths.
Instruction Scope
The SKILL.md expects a local VeridicusScan MCP bridge to be available and instructs the agent to call MCP methods (open_session, scan_file, scan_url, scan_text, etc.). This is coherent, but the instructions assume the client runtime provides those MCP methods and file-access plumbing; the skill does not declare how the bridge is discovered or authenticated. Verify the host/client MCP connector's behavior (local vs remote) before sending sensitive files or secrets.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal disk footprint and no automatic downloads. Low install risk.
Credentials
No environment variables, credentials, or config paths are requested. That matches the skill's role as a connector to an existing MCP bridge rather than a standalone service requiring secrets.
Persistence & Privilege
always:false and no install actions. The agents/openai.yaml sets allow_implicit_invocation: true, which permits implicit invocation when the platform's policy allows it. This is not inherently problematic but users should be aware the skill can be suggested/selected by the agent if the platform permits implicit invocation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install veridicusscan-mcp-analyst - 安装完成后，直接呼叫该 Skill 的名称或使用
/veridicusscan-mcp-analyst触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.5
Add a public technical reference for MCP sessions, runtime guardrails, and local automation workflows.
v0.1.4
Add a public recruiting workflow example that points to the Veridicus Scan AI job application screening guide.
v0.1.3
Clarify runtime-defense coverage, public-URL limits, sanitized_only handling, and align implicit invocation metadata with the published registry behavior.
v0.1.2
Add the VeridicusScan App Store link to the skill and repository description.
v0.1.1
Clarify that the skill scans for prompt-injection and hidden-instruction risks with VeridicusScan MCP.
v0.1.0
Initial public release of the VeridicusScan MCP analyst skill.
元数据
常见问题
VeridicusScan MCP Analyst 是什么？
Use when the user wants to inspect a prompt, local file, or public HTTPS URL with VeridicusScan through its MCP bridge, triage prompt-injection or hidden-ins... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 289 次。
如何安装 VeridicusScan MCP Analyst？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install veridicusscan-mcp-analyst」即可一键安装，无需额外配置。
VeridicusScan MCP Analyst 是免费的吗？
是的，VeridicusScan MCP Analyst 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
VeridicusScan MCP Analyst 支持哪些平台？
VeridicusScan MCP Analyst 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 VeridicusScan MCP Analyst？
由 sabaaziz991-hash（@sabaaziz991-hash）开发并维护，当前版本 v0.1.5。
推荐 Skills