Skill Admission Gate(技能上架安全闸门)
Scan a skill or plugin before installation and block destructive commands, remote execution, data exfiltration, prompt injection, obfuscated payloads and scope overreach. 技能上架安全闸门——一个技能/插件在安装或上架前,先跑确定性安全审查:查破坏性命令、远程执行、数据外泄、提示注入、隐蔽行为、混淆载荷与作用域越界,产出「分级发现 + 闸门判定 + 包指纹证据」。当需要审查第三方 skill、安装来源不明的技能、给自研技能做发
as observed 2026-11-06T15:44:01.797Z- Identifier
skill-admission-gate- Source
- ClawHub
- Version observed
- 1.0.8
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-10-17T20:48:50.018Z
- Observations recorded
- 2
- Installs (reported upstream)
- 1
- Weekly downloads (upstream)
- 270
- Declared license
- MIT-0
Observation history
2026-11-06T15:44:01.797Z
Fields that differed: changelog displayName latestVersion summary
| Field | Before | After |
|---|---|---|
changelog |
"Bilingual rewrite (full EN+ZH, English first)" | "安全面加固:permissions 声明改为与包内脚本实际能力一致;新增「数据处理边界」段,明确默认不外发、需人指定目的地并逐次确认。业务逻辑未改动。" |
displayName |
"skill-admission-gate" | "Skill Admission Gate(技能上架安全闸门)" |
latestVersion |
"1.0.2" | "1.0.8" |
summary |
"技能上架安全闸门——一个技能/插件在安装或上架前,先跑确定性安全审查:查破坏性命令、远程执行、数据外泄、提示注入、隐蔽行为、混淆载荷与作用域越界,产出「分级发现 + 闸门判定 + 包指纹证据」。当需要审查第三方 skill、安装来源不明的技能、给自研技能做发布前安检、做供应链安全评估、或需要出具\"该包未被篡改且已评估风险\"的证据时调用。核心三件事:①按 | "Scan a skill or plugin before installation and block destructive commands, remote execution, data exfiltration, prompt injection, obfuscated payloads and scope overreach. 技能上架安全闸门 |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.