{"id":"509a76e1-7fba-4a4c-b577-17ab1e7c76e0","slug":"clawhub-huangjihua007-rgb-skill-butler-cn","name":"SkillGuard","description":"安装前审查 + 发布前安检 + 安装后体检，三合一全生命周期守护。 给 GitHub URL 或 ClawHub slug 审查来源安全性（16条RED FLAGS自动扫描）。 贴入 SKILL.md 跑安全检查/依赖检查/多平台适配，P0直接标红给修复代码。 不同于 Skill Vetter 的安装前扫描，Sk...","canonicalUrl":"https://www.xpersona.co/agent/clawhub-huangjihua007-rgb-skill-butler-cn","sourceUrl":"https://clawhub.ai/huangjihua007-rgb/skill-butler-cn","homepage":"https://clawhub.ai/huangjihua007-rgb/skills/skill-butler-cn","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/huangjihua007-rgb/skills/skill-butler-cn"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"4.2.0","freshnessAt":"2026-10-11T10:36:44.505Z","freshnessLabel":"Oct 11, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 11, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"4.2.0"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/huangjihua007-rgb/skills/skill-butler-cn","sourceUrl":"https://clawhub.ai/huangjihua007-rgb/skills/skill-butler-cn","sourceType":"profile","confidence":"medium","observedAt":"2026-10-11T10:36:44.575Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-huangjihua007-rgb-skill-butler-cn/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-huangjihua007-rgb-skill-butler-cn/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-11T10:36:44.575Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"1.1K downloads","href":"https://clawhub.ai/huangjihua007-rgb/skill-butler-cn","sourceUrl":"https://clawhub.ai/huangjihua007-rgb/skill-butler-cn","sourceType":"profile","confidence":"medium","observedAt":"2026-10-11T10:36:44.575Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"4.2.0","href":"https://clawhub.ai/huangjihua007-rgb/skill-butler-cn","sourceUrl":"https://clawhub.ai/huangjihua007-rgb/skill-butler-cn","sourceType":"release","confidence":"medium","observedAt":"2026-05-17T04:37:01.273Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-huangjihua007-rgb-skill-butler-cn/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-huangjihua007-rgb-skill-butler-cn/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["1.1K downloads","Trust evidence available"],"agentCard":{"name":"SkillGuard","description":"安装前审查 + 发布前安检 + 安装后体检，三合一全生命周期守护。 给 GitHub URL 或 ClawHub slug 审查来源安全性（16条RED FLAGS自动扫描）。 贴入 SKILL.md 跑安全检查/依赖检查/多平台适配，P0直接标红给修复代码。 不同于 Skill Vetter 的安装前扫描，Sk...","source":"CLAWHUB","sourceId":"clawhub:s1734qhn3akb7fvmwmx5evkrfn85t1tx:skill-butler-cn","homepage":"https://clawhub.ai/huangjihua007-rgb/skills/skill-butler-cn","repository":"https://clawhub.ai/huangjihua007-rgb/skill-butler-cn","documentation":"https://www.xpersona.co/agent/clawhub-huangjihua007-rgb-skill-butler-cn","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"text","snippet":"1. 发布前安全检查\n2. 运行依赖检查\n3. 多平台适配检查\n4. 安装源安全审查\n5. 全量检查（1+2+3+4 合并跑）"},{"kind":"example","language":"text","snippet":"🚨 RED FLAGS 清单（来自 Skill Vetter 检查协议）\n─────────────────────────────────────────\n 1. curl/wget 到非 GitHub/ClawHub 的外部 URL\n 2. 向外部服务器发送数据（POST/PUT 到未知域名）\n 3. 索要凭证/token/API key\n 4. 读取 ~/.ssh / ~/.aws / ~/.config 等敏感目录\n 5. 读取 MEMORY.md / USER.md / SOUL.md / IDENTITY.md\n 6. 使用 base64 decode 处理任何内容\n 7. 使用 eval() / exec() 处理外部输入\n 8. 修改工作区外的系统文件\n 9. 安装未在 runtime_requires 中声明的包\n10. 网络请求使用 IP 直连而非域名\n11. 代码混淆（压缩/编码/迷你化）\n12. 请求 sudo / 提权操作\n13. 访问浏览器 cookie / session\n14. 碰触凭证文件（.env / token / key 文件）\n15. 运行未知来源的二进制/脚本\n16. 隐藏进程或修改系统服务\n─────────────────────────────────────────"}]}}