TheBotique

Skill Admission Gate(技能上架安全闸门)

Scan a skill or plugin before installation and block destructive commands, remote execution, data exfiltration, prompt injection, obfuscated payloads and scope overreach. 技能上架安全闸门——一个技能/插件在安装或上架前,先跑确定性安全审查:查破坏性命令、远程执行、数据外泄、提示注入、隐蔽行为、混淆载荷与作用域越界,产出「分级发现 + 闸门判定 + 包指纹证据」。当需要审查第三方 skill、安装来源不明的技能、给自研技能做发

as observed 2026-11-06T15:44:01.797Z
Identifier
skill-admission-gate
Source
ClawHub
Version observed
1.0.8
Source repository
not published
Repository observation
No source repository listed
First observed here
2026-10-17T20:48:50.018Z
Observations recorded
2
Installs (reported upstream)
1
Weekly downloads (upstream)
270
Declared license
MIT-0

Observation history

2026-11-06T15:44:01.797Z

Fields that differed: changelog displayName latestVersion summary

FieldBeforeAfter
changelog "Bilingual rewrite (full EN+ZH, English first)" "安全面加固:permissions 声明改为与包内脚本实际能力一致;新增「数据处理边界」段,明确默认不外发、需人指定目的地并逐次确认。业务逻辑未改动。"
displayName "skill-admission-gate" "Skill Admission Gate(技能上架安全闸门)"
latestVersion "1.0.2" "1.0.8"
summary "技能上架安全闸门——一个技能/插件在安装或上架前,先跑确定性安全审查:查破坏性命令、远程执行、数据外泄、提示注入、隐蔽行为、混淆载荷与作用域越界,产出「分级发现 + 闸门判定 + 包指纹证据」。当需要审查第三方 skill、安装来源不明的技能、给自研技能做发布前安检、做供应链安全评估、或需要出具\"该包未被篡改且已评估风险\"的证据时调用。核心三件事:①按 "Scan a skill or plugin before installation and block destructive commands, remote execution, data exfiltration, prompt injection, obfuscated payloads and scope overreach. 技能上架安全闸门

Correction

If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.