{"id":"169fe118-b698-462b-9aaf-26396c472205","slug":"clawhub-xocio-skill-vetter-zh","name":"Skill-Vetter-ZH 中文","description":"安装任何 AI 智能体技能前的安全审查协议。检测凭据窃取、混淆代码、数据外泄等危险标志。风险分级：低危/中危/高危/极危。生成结构化审查报告。在未经审查的情况下，禁止安装任何来源不明的技能。","canonicalUrl":"https://www.xpersona.co/agent/clawhub-xocio-skill-vetter-zh","sourceUrl":"https://clawhub.ai/xocio/skill-vetter-zh","homepage":"https://clawhub.ai/xocio/skills/skill-vetter-zh","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/xocio/skills/skill-vetter-zh"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"1.0.0","freshnessAt":"2026-10-09T18:34:50.403Z","freshnessLabel":"Oct 9, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 9, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"1.0.0"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/xocio/skills/skill-vetter-zh","sourceUrl":"https://clawhub.ai/xocio/skills/skill-vetter-zh","sourceType":"profile","confidence":"medium","observedAt":"2026-10-09T18:34:50.403Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-xocio-skill-vetter-zh/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-xocio-skill-vetter-zh/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-09T18:34:50.403Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"2.1K downloads","href":"https://clawhub.ai/xocio/skill-vetter-zh","sourceUrl":"https://clawhub.ai/xocio/skill-vetter-zh","sourceType":"profile","confidence":"medium","observedAt":"2026-10-09T18:34:50.403Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"1.0.0","href":"https://clawhub.ai/xocio/skill-vetter-zh","sourceUrl":"https://clawhub.ai/xocio/skill-vetter-zh","sourceType":"release","confidence":"medium","observedAt":"2026-05-02T05:53:23.411Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-xocio-skill-vetter-zh/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-xocio-skill-vetter-zh/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["2.1K downloads","Trust evidence available"],"agentCard":{"name":"Skill-Vetter-ZH 中文","description":"安装任何 AI 智能体技能前的安全审查协议。检测凭据窃取、混淆代码、数据外泄等危险标志。风险分级：低危/中危/高危/极危。生成结构化审查报告。在未经审查的情况下，禁止安装任何来源不明的技能。","source":"CLAWHUB","sourceId":"clawhub:s172j86vyw5s0s30q1k781zkd584w8w9:skill-vetter-zh","homepage":"https://clawhub.ai/xocio/skills/skill-vetter-zh","repository":"https://clawhub.ai/xocio/skill-vetter-zh","documentation":"https://www.xpersona.co/agent/clawhub-xocio-skill-vetter-zh","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"text","snippet":"🚨 发现以下任一情况，立即拒绝：\n─────────────────────────────────────────\n• 向未知 URL 发起 curl/wget 请求\n• 向外部服务器发送数据\n• 请求凭据、令牌或 API 密钥\n• 在没有明确原因的情况下访问 ~/.ssh、~/.aws、~/.config\n• 访问 MEMORY.md、USER.md、SOUL.md、IDENTITY.md\n• 对任何内容使用 base64 解码\n• 对外部输入使用 eval() 或 exec()\n• 修改工作区以外的系统文件\n• 在未列出依赖的情况下安装软件包\n• 向 IP 地址（而非域名）发起网络调用\n• 代码混淆（压缩、编码、最小化）\n• 请求 sudo 或 root 提升权限\n• 访问浏览器 Cookie 或会话信息\n• 接触凭据文件\n─────────────────────────────────────────"},{"kind":"example","language":"markdown","snippet":"## 技能审查报告 — [技能名称] v[版本号]\n**日期：** [日期]\n**来源：** [URL]\n**审查方：** [智能体名称]\n\n### 自动化检查\n- [ ] 无对用户可控输入的 exec 调用\n- [ ] 无向未知域名发起的出站网络请求\n- [ ] 无凭据收集模式\n- [ ] 无工作区以外的文件系统访问\n- [ ] 依赖项锁定至具体版本\n- [ ] 无混淆或最小化代码\n\n### 人工检查\n- [ ] 作者有发布历史（非全新账号）\n- [ ] 下载量与发布时间相符\n- [ ] README 清楚说明了技能的实际功能\n- [ ] 无\"相信我\"或制造紧迫感的措辞\n- [ ] 更新日志存在且内容合理\n\n### 结论\n**风险等级：** 低危 / 中危 / 高危\n**建议：** 可安装 / 谨慎安装 / 禁止安装\n**备注：** [具体关注点]"}]}}