Xpersona
agentCLAWHUBUnverified

安全审查

Review code for security risks like injection, auth flaws, sensitive data leaks, and recommend precise, actionable fixes with risk levels and patches. Skill: 安全审查 Owner: sf0799 Summary: Review code for security risks like injection, auth flaws, sensitive data leaks, and recommend precise, actionable fixes with risk levels and patches. Tags: latest:0.1.0 Version history: v0.1.0 | 2026-04-06T08:20:47.181Z | user initial release Archive index: Archive v0.1.0: 4 files, 2793 bytes Files: agents/openai.yaml (247b), skill-card.md (2273b), SKILL.md (1221b), _meta.json (132

OpenClaw
View on ClawHubHomepage

Rank

62

Safety

84

Downloads

1.9k

Updated

Oct 9, 2026

Version

0.1.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.9K downloads reported by the source. Last updated 10/9/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 9, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 9, 2026
Adoption signal
1.9K downloadsadoption · observed Oct 9, 2026
Latest release
0.1.0release · observed Apr 6, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s175a2gydqwpmq0pqjcykvhnq584b17r:code-security
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-sf0799-code-security/snapshot"

Documentation

CLAWHUB

3,830 characters of source documentation, loaded on request.

Extracted files

4 files captured from the source.

SKILL.md

---
name: code-security
description: Review application code in the current workspace for concrete security issues and provide proportionate fixes. Use when the user asks for a code security audit, secure rewrite, permission review, or risk analysis around input handling, secrets, auth, files, or command execution. Do not use for host hardening or infrastructure-wide security posture. Chinese triggers: 安全审查、查漏洞、SQL 注入、XSS、路径穿越、权限问题、敏感信息泄露.
---

# 安全审查

只报真实风险，不制造恐慌。

## 工作流

1. 找出信任边界、用户输入、特权操作和敏感数据路径。
2. 重点检查注入、路径穿越、XSS、不安全反序列化、认证授权缺陷、密钥泄露、不安全日志和命令执行问题。
3. 同时评估可利用性和影响面，不夸大低置信度问题。
4. 用清晰等级标记风险，如 critical、high、medium、low。
5. 给出直接可落地的修复建议，能给代码补丁时优先给补丁。
6. 如果本轮无法彻底关闭风险，就说明残余风险和后续检查点。

## 输出

- 风险点
- 风险等级
- 影响说明
- 修复方案
- 可直接使用的补丁或代码建议

_meta.json

{
  "ownerId": "kn7f0wf6cndbzd2czy2c3ftj8s82nhb6",
  "slug": "code-security",
  "version": "0.1.0",
  "publishedAt": 1775463647181
}

skill-card.md

## Description:

Reviews application code in the current workspace for concrete security issues and provides proportionate fixes for risks such as injection, authorization flaws, sensitive data leaks, unsafe file handling, and command execution.

This skill is ready for commercial/non-commercial use.

## Publisher:

[sf0799](https://clawhub.ai/user/sf0799)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and engineers use this skill to review code for realistic security risks and receive prioritized findings, impact explanations, and actionable remediation guidance. It is especially suited to focused reviews of input handling, secrets, authentication, authorization, file access, logging, and command execution paths.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: Security review output can miss issues or overstate low-confidence findings.

Mitigation: Treat findings as review assistance and validate important conclusions against the affected code, tests, and threat model before deployment.

Risk: Patch suggestions may change behavior or introduce regressions if applied without project-specific review.

Mitigation: Review proposed changes, run the relevant test suite, and apply patches only after confirming they fit the application architecture.

Risk: The skill may answer or present prompts in Chinese by default.

Mitigation: Set the desired response language explicitly when a different review language is required.

## Reference(s):

- [ClawHub skill page](https://clawhub.ai/sf0799/skills/code-security)

## Skill Output:

**Output Type(s):** [text, markdown, code, guidance]

**Output Format:** [Markdown security review with risk levels, impact notes, remediation steps, and patch or code suggestions when applicable]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [May answer in Chinese by default based on the skill text and interface prompts.]

## Skill Version(s):

0.1.0 (source: server release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

agents/openai.yaml

interface:
  display_name: "安全审查"
  short_description: "检查代码中的真实安全风险，并给出可直接落地的修复方案。"
  default_prompt: "使用 $code-security 审查这段代码的安全问题并给出修复建议。"

Related agents

Same protocol, similar job.

Github ReposUpdated 6h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/sf0799/skills/code-security",
      "sourceUrl": "https://clawhub.ai/sf0799/skills/code-security",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T23:32:21.864Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-sf0799-code-security/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-sf0799-code-security/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-09T23:32:21.864Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "1.9K downloads",
      "href": "https://clawhub.ai/sf0799/code-security",
      "sourceUrl": "https://clawhub.ai/sf0799/code-security",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T23:32:21.864Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "0.1.0",
      "href": "https://clawhub.ai/sf0799/code-security",
      "sourceUrl": "https://clawhub.ai/sf0799/code-security",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-04-06T08:20:47.181Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-sf0799-code-security/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-sf0799-code-security/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 0.1.0",
      "description": "initial release",
      "href": "https://clawhub.ai/sf0799/code-security",
      "sourceUrl": "https://clawhub.ai/sf0799/code-security",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-04-06T08:20:47.181Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 10, 2026.

Sponsored

Ads related to 安全审查 and adjacent AI workflows.