技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 515 · 2 current installs · 2 all-time installs
⭐ 0
安装量（当前） 2
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：avirweb/openclaw-json-editing
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's documentation and examples show it will read and write OpenClaw config files and substitute environment-based secrets, but the declared requirements (no env vars, only jq binary) and the SKILL.md content are internally inconsistent and leave potential for unexpected access to secrets or config files.
目的
The skill claims advanced JSON5 editing and 'type-safe modifications using jq', but the SKILL.md is almost entirely TypeScript code examples (JSON5, Zod, fs) and contains no concrete jq commands or examples. Requiring the jq binary in metadata is disproportionate given the instruction content; either jq is unnecessary or the documentation is incomplete. Also the skill references OpenClaw-specific CLI commands (openclaw config validate/patch/pa…
说明范围
SKILL.md includes explicit file paths (e.g. ~/.openclaw/config.json, ~/.openclaw/agents/<id>/config.json, sessions/state dir) and code showing reading/writing those files and collecting environment variable references (OPENAI_API_KEY, ANTHROPIC_API_KEY). These are concrete instructions that imply the agent should read user config files and environment variables and write back to disk. The skill metadata does not declare or explain this access,…
安装机制
This is an instruction-only skill with no install spec and no code files, so nothing new will be written to disk at install time. That lowers install-time risk.
证书
The SKILL.md explicitly discusses substituting values like ${OPENAI_API_KEY} and ${ANTHROPIC_API_KEY:-fallback-key} and includes code to collect env-var paths. However the registry metadata declares no required environment variables or credentials. That mismatch is concerning because the skill's legitimate function (editing configs that embed API keys) requires reading environment variables and potentially handling secrets, yet no environment …
持久
always:false (normal) and the skill does not request system-wide privileges, but its instructions include code to write config files under ~/.openclaw and modify agent config files. Writing user configuration is a legitimate capability for a config-editing skill, but it means the agent will modify persistent data on the host if invoked — the user should expect file writes to their OpenClaw state directory.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「OpenClaw JSON Editing Masterclass」。简介：Advanced editing of OpenClaw JSON5 configs with schema validation, merge patchi…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/avirweb/openclaw-json-editing/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。