技能详情（站内镜像，无评论）
作者：Alireza Rezvani @alirezarezvani
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 172 · 2 current installs · 2 all-time installs
⭐ 0
安装量（当前） 2
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：alirezarezvani/codebase-onboarding
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's instructions mostly match an onboarding purpose, but there are inconsistencies (examples referencing Notion/Confluence tokens that aren't declared) and it instructs running potentially impactful commands (migrations, docker compose, tests) without safeguards — review before use.
目的
The described goal (generate onboarding docs from a repo) matches the provided commands and templates: listing files, reading package.json, generating README content, and offering Notion/Confluence export examples. However, the SKILL.md includes code examples that rely on external credentials (NOTION_TOKEN, CONFLUENCE_TOKEN, ONBOARDING_PARENT_PAGE_ID) but the skill declares no required environment variables or primary credential, which is an i…
说明范围
Runtime instructions instruct the agent to run many repository and system commands (find, grep, git log, run pnpm test:ci, docker compose up, pnpm db:migrate/db:seed). Those are reasonable for a hands-on onboarding workflow but are potentially impactful: running migrations or composing services could affect real infrastructure if environment variables point to non-local resources. The instructions also read source files (auth, schema) which ma…
安装机制
No install spec and no code files beyond documentation templates — lowest install risk. The skill is instruction-only so nothing new is written to disk by an installer step.
证书
The SKILL.md references publishing to Notion and Confluence with example code that expects NOTION_TOKEN and CONFLUENCE_TOKEN, but the skill declares no required env vars. That mismatch could mislead users into providing credentials without clear guidance. The instructions also ask to copy/edit .env and 'ask a teammate or see Vault' — but offer no guardrails about which envs are safe to populate or how to ensure local resources are used rather …
持久
The skill is not always-enabled, does not request persistent presence, and does not modify other skills or system-wide settings. Autonomous invocation is allowed (default), which is normal, and should be considered together with other risks when deciding whether to enable autonomous runs.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「codebase-onboarding」。简介：Codebase Onboarding。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/alirezarezvani/codebase-onboarding/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。