Claude Code, Skill
Openclaw Skills
40 production-ready AI agent skills, all original or meaningfully modified.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV SECRETS_ENV_READ
Why this grade
- PERMISSION_DELETE_FILES Low
Contains a call that can delete files.
research-pro/scripts/host_native_trace.py, line 147
completed = subprocess.run(cmd, capture_output=True, text=True, check=False) - NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
deploy-artifact/scripts/deploy.sh, line 229
upload_response=$(curl -s -X POST "https://api.vercel.com/v2/files" \ - NETWORK_UNNAMED_HOST Low
Calls a fixed host that the description does not name.
deploy-artifact/scripts/deploy.sh, line 229
upload_response=$(curl -s -X POST "https://api.vercel.com/v2/files" \ - SECRETS_PATH_DOTENV Low
Mentions a .env file.
research-pro/SKILL.md, line 106
cp {baseDir}/env.example ~/.config/research-pro/.env - SECRETS_ENV_READ Note
Reads an environment variable whose name contains KEY, SECRET, TOKEN, PASSWORD or CREDENTIAL.
memory-audit/memory-audit.py, line 24
GLM_API_KEY = os.environ.get("GLM_API_KEY", "")
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
research-pro/scripts/host_native_trace.py, line 147
completed = subprocess.run(cmd, capture_output=True, text=True, check=False)
research-pro/scripts/lib/cache.mjs, line 250
if (Date.now() - fs.statSync(lockFile).mtimeMs > 60000) fs.unlinkSync(lockFile);
research-pro/scripts/lib/cache.mjs, line 260
try { fs.unlinkSync(lockFile); } catch { /* ignore */ }
Show more
research-pro/scripts/lib/trace.mjs, line 400
fs.rmSync(p, { recursive: true, force: true });
whisper-transcribe/scripts/transcribe.py, line 47
subprocess.run(
whisper-transcribe/scripts/transcribe.py, line 106
r = subprocess.run([MLX_ASR_BIN, "--help"], capture_output=True, timeout=10)
whisper-transcribe/scripts/transcribe.py, line 125
r = subprocess.run(cmd, capture_output=True, text=True)
whisper-transcribe/scripts/transcribe.py, line 164
subprocess.run(
whisper-transcribe/scripts/transcribe.py, line 184
r = subprocess.run(cmd, capture_output=True, text=True, timeout=120)
whisper-transcribe/scripts/transcribe.py, line 196
os.remove(mp3_path)
whisper-transcribe/scripts/transcribe.py, line 224
r = subprocess.run(cmd, capture_output=True, text=True)
whisper-transcribe/scripts/transcribe.py, line 240
subprocess.run(["curl", "-L", "-o", model_path, WHISPER_MODEL_URL], check=True)
whisper-transcribe/scripts/transcribe.py, line 307
os.remove(audio_path)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach api.vercel.com. The description does not name that host. can reach a host that is not written as a fixed address. can reach openrouter.ai. The description does not name that host. can reach www.googleapis.com. The description does not name that host. can reach api.x.ai. The description does not name that host. can reach api.tavily.com. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
deploy-artifact/scripts/deploy.sh, line 229
upload_response=$(curl -s -X POST "https://api.vercel.com/v2/files" \
deploy-artifact/scripts/deploy.sh, line 259
deployment_response=$(curl -s -X POST "https://api.vercel.com/v13/deployments?teamId=$TEAM_ID" \
deploy-artifact/scripts/deploy.sh, line 287
status_response=$(curl -s "https://api.vercel.com/v13/deployments/$deployment_id?teamId=$TEAM_ID" \
Show more
douyin-dl/scripts/douyin_download.py, line 70
resp = requests.head(url, allow_redirects=True, timeout=10)
douyin-dl/scripts/douyin_download.py, line 126
resp = requests.get(TIKHUB_API_URL, params=params, headers=headers, timeout=30)
douyin-dl/scripts/douyin_download.py, line 162
resp = requests.get(video_url, headers=headers, timeout=120, stream=True)
mlx-asr/SKILL.md, line 121
curl POST /v1/audio/transcriptions (OpenAI-compatible)
mlx-asr/scripts/healthcheck.sh, line 15
if ! curl -sf "http://localhost:$PORT/health" > /dev/null 2>&1; then
mlx-asr/scripts/healthcheck.sh, line 34
curl -sf "http://localhost:$PORT/health" 2>/dev/null | python3 -m json.tool 2>/dev/null || echo "(no json response)"
mlx-asr/scripts/healthcheck.sh, line 36
curl -sf "http://localhost:$PORT/health" > /dev/null
mlx-asr/scripts/serve.sh, line 90
if curl -sf "http://localhost:$PORT/health" > /dev/null 2>&1; then
mlx-asr/scripts/serve.sh, line 139
curl -sf "http://localhost:$PORT/health" 2>/dev/null | python3 -m json.tool 2>/dev/null || echo "(health endpoint unreachable)"
mlx-asr/scripts/transcribe.sh, line 76
if ! curl -sf "http://localhost:$PORT/health" > /dev/null 2>&1; then
mlx-asr/scripts/transcribe.sh, line 101
# Build curl request to OpenAI-compatible endpoint
moonshot-usage/SKILL.md, line 112
curl -s https://api.moonshot.ai/v1/users/me/balance \
moonshot-usage/scripts/balance.sh, line 13
RESPONSE=$(curl -s https://api.moonshot.ai/v1/users/me/balance \
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
memory-audit/memory-audit.py, line 24
GLM_API_KEY = os.environ.get("GLM_API_KEY", "")
moonshot-usage/scripts/balance.sh, line 5
API_KEY="${MOONSHOT_API_KEY:-$(jq -r '.env.MOONSHOT_API_KEY // empty' ~/.openclaw/openclaw.json 2>/dev/null)}"
research-pro/SKILL.md, line 106
cp {baseDir}/env.example ~/.config/research-pro/.env
Show more
reddit/scripts/reddit-cli.js, line 7
const TOKEN_V2 = process.env.TOKEN_V2 || '';
research-pro/SKILL.md, line 108
chmod 600 ~/.config/research-pro/.env
research-pro/SKILL.md, line 353
# Perplexity via OpenRouter - 实时网络搜索 + 推理（凭据由 credentials 解析，勿 source 平台 .env）
research-pro/SKILL.md, line 398
# Credentials: scripts auto-load via lib/credentials.mjs - do NOT hardcode source ~/.openclaw/.env
research-pro/evals/validate_contract_gate.mjs, line 71
assert.match(skill, /打印 `\.env` \/ secret 值/, "no-secrets rule must remain");
research-pro/scripts/doctor.mjs, line 64
cp "${baseDir}/env.example" "${home}/.env"
research-pro/scripts/doctor.mjs, line 65
# 编辑 ${home}/.env ，填入任意一个:
research-pro/scripts/reddit-cli.js, line 7
const TOKEN_V2 = process.env.TOKEN_V2 || '';
research-pro/scripts/trace.mjs, line 116
scope_key: args["scope-key"] || process.env.RESEARCH_PRO_SCOPE_KEY || "",
whisper-transcribe/scripts/transcribe.py, line 147
key = os.environ.get("GROQ_API_KEY", "")
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Note
no licence file found.
LICENCE_MISSING
No file path was stored.
no licence file found.
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 874468ea067b. can delete files. can reach api.vercel.com. The description does not name that host. can reach a host that is not written as a fixed address. can reach openrouter.ai. The description does not name that host. can reach www.googleapis.com. The description does not name that host. can reach api.x.ai. The description does not name that host. can reach api.tavily.com. The description does not name that host. reads a credential or environment file. no licence file found.
Date and source
Date checked:
github.com
Commit graded: 874468ea067ba98c587c0a1a6261c5bfce7c8409
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.