安装社区 Skill 前做 5 点安全审查

解决“想装社区技能但担心恶意代码/凭据泄露”场景：先做来源、权限、脚本、外联行为、回滚方案五项审查，再决定是否启用。

REDDITDiscovered 2026-02-12Author u/Popular-Help5516

Prerequisites

You can inspect skill files before installation and control runtime permissions.
You have a staging environment for first-run validation.

Steps

Check source trust: publisher history, repo age, commit activity, and issue discussions.
Review requested permissions/secrets and reject skills asking for broad unnecessary scopes.
Audit install/run scripts for suspicious downloads, shell execution, credential/file exfil patterns.
Run in staging with fake credentials and outbound monitoring before production enablement.
Prepare rollback: disable skill, revoke tokens, and rotate any potentially exposed secrets.

Commands

openclaw help

openclaw gateway status

git status

Verify

Skill runs with least privilege in staging, no unexpected outbound destinations, and clear rollback path tested.

Caveats

The Reddit post cites third-party audit statistics; dataset and methodology should be independently verified（需验证）.
Even reviewed skills can become risky after updates; re-audit on every major version.

Source attribution

This tip is aggregated from community/public sources and preserved with attribution.