技能详情（站内镜像，无评论）
作者：Alireza Rezvani @alirezarezvani
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v2.1.1
统计：⭐ 0 · 2.6k · 16 current installs · 16 all-time installs
⭐ 0
安装量（当前） 16
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：alirezarezvani/senior-backend
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's files and instructions generally match a 'senior backend' purpose, but the runtime docs and bundled scripts reference and require sensitive environment variables and destructive operations (DB migrations, load tests) that are not declared in the metadata — this mismatch is a security and transparency concern.
目的
The skill name/description (API design, DB migrations, load testing) matches the included artifacts: an API scaffolder, database migration tool, load tester, and multiple backend/security references. The requested binaries/env in metadata are minimal (none), which is plausible for a pure Python script bundle, but see environment_proportionality for problems.
说明范围
SKILL.md instructs the agent (or user) to run bundled scripts that accept database connection strings and API endpoints and can perform schema analysis, generate and run migrations, and run high-concurrency HTTP load tests. Those actions can modify production databases or generate high traffic against external services. The instructions and examples also reference environment variables and secrets (e.g., $DATABASE_URL, process.env.JWT_SECRET, …
安装机制
There is no install spec; this is instruction-only with bundled Python scripts. No remote downloads or package installers are specified, so nothing will be fetched at install time. Risk comes from executing the included scripts (they are present in the bundle) rather than from installation.
证书
The registry metadata declares no required environment variables, but SKILL.md examples and the bundled code reference many sensitive env vars and secrets (DATABASE_URL, DB_HOST/DB_USER/DB_PASSWORD, JWT_SECRET, JWT_REFRESH_SECRET, STRIPE_WEBHOOK_SECRET, LOG_LEVEL, etc.). That mismatch means the skill expects access to credentials and secrets that were not disclosed in the manifest. Requiring DB credentials or signing secrets is reasonable for …
持久
The skill is not marked always:true and does not request persistent system-level privileges. It appears not to modify other skills or system settings. The primary concern is runtime: the scripts, when executed, can perform DB migrations and network load tests but they do so only when invoked.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Senior Backend」。简介：Designs and implements backend systems including REST APIs, microservices, data…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/alirezarezvani/senior-backend/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。