技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.2
统计：⭐ 0 · 1.3k · 3 current installs · 3 all-time installs
⭐ 0
安装量（当前） 3
🛡 VirusTotal ：可疑 · OpenClaw ：良性
Package：atlaspa/openclaw-signet
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：良性
OpenClaw 评估
The skill's code and runtime instructions are coherent with its stated purpose: local SHA-256 signing, verification, and (optional) quarantine/restore of skills; it does not request credentials or make network calls in the visible code.
目的
Name/description (sign and verify skills with SHA-256) matches the files and instructions. The script only needs python3 and operates on the workspace/skills tree, computes file hashes, and writes a local manifest and snapshots/quarantine directories. No unrelated credentials, binaries, or external services are requested.
说明范围
SKILL.md instructs running the included Python script with a --workspace argument. The script's visible behaviour is limited to walking skill directories, hashing files, saving a manifest, and taking local actions (quarantine/snapshots/restore). It only reads optional OPENCLAW_WORKSPACE env var to locate the workspace; it does not reference other system paths or transmit data externally in the shown code.
安装机制
There is no installer; this is instruction-plus-script. README suggests cloning the repo into the workspace. No network calls or remote downloads are performed by the script (stdlib-only). No extract/download install steps are present in the registry metadata.
证书
The skill declares no required environment variables or credentials. The script optionally reads OPENCLAW_WORKSPACE to resolve workspace location, which is reasonable for its function. It does not ask for API keys, tokens, or unrelated secrets.
持久
The skill is not forced-always (always:false) and is user-invocable. The script writes a manifest and may move/rename skill directories to quarantine or create snapshots under the workspace, which are necessary for its functionality but are destructive actions if used accidentally. The skill can be invoked by the agent (disable-model-invocation:false), which is normal for skills — be aware that agent-initiated runs could modify skill files wit…
综合结论
This tool appears to do what it says: locally sign and verify skills and optionally quarantine or restore them. Before installing or running: (1) review the included scripts/signet.py yourself (it's a single-file Python tool) because it will write manifests and move/rename skill directories when you use quarantine/reject/restore; (2) back up your workspace (or ensure version control) before using quarantine/reject or restore operations; (3) ru…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Openclaw Signet」。简介：Cryptographic skill verification. Sign installed skills with SHA-256 content ha…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/atlaspa/openclaw-signet/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。