skill-analysis
装 Skill 前，先过一遍安检 —— 纯本地 · 零外联 · 零第三方依赖，代码不出你的机器。①【一句话结论】BLOCK / NEED_REVIEW / PASS 准入判定 + 0-100 风险评分 + A-F 等级与发布建议。②【全自动守护】会话启动自动扫描、新装 Skill 静默体检。③【深度对抗】多层混淆解码、污点数据流、Unicode 走私指令解码、反序列化 RCE、沙箱动态取证。④【情报驱动】勒索病毒、提示注入、MCP 工具投毒、供应链投毒、金融欺诈诱导、身份自改写持久化。⑤【工程化】跨平台批量扫描、CI 门禁、SARIF/SBOM/JSON 导出。⑥【可自证可信】无自动更新、发布
as observed 2026-10-06T10:50:34.888Z- Identifier
skill-analysis- Source
- ClawHub
- Version observed
- 3.3.8
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-09-30T05:46:36.081Z
- Observations recorded
- 2
- Installs (reported upstream)
- 0
- Weekly downloads (upstream)
- 157
- Declared license
- MIT-0
Observation history
2026-10-06T10:50:34.888Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"**v3.3.6 平台兼容扩展与情报规则升级**\n\n- 新增对 17 类平台/Agent/IDE 的兼容分析\n- 更新 2026H2 情报检测规则，包括 Gatekeeper 隔离属性类、SVG XSS、语义蠕虫 NL、凭证路径外传、生命周期脚本链等五大类" | "No file changes detected in this release.\n\n- Version number updated to 3.3.8.\n- No other modifications or new features." |
latestVersion |
"3.3.6" | "3.3.8" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.