360 Secure SkillHub
360 安全技能中心

PluginEval

该 Skill 用于在安装前审查技能:调用 plugineval-core 执行安全扫描、质量评分与反模式检测,并输出综合审查报告;文件列表未包含其引用的 vet/eval 脚本,实际能力依赖 plugineval-core 核心评估引擎。

donmeusi
donmeusi
热度 39.43
最近更新 2026-05-11 17:38:47
分类:安全依赖:代码执行 / 读写文件应用场景:代码审查 / 报告撰写 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add plugineval
Metadata
name
plugineval
version
2.0.0
description
PluginEval Quality Evaluation with enhanced UI. Wraps plugineval-core with vetting and reporting features. Requires plugineval-core.
source
https://github.com/Donmeusi/openclaw-config/tree/main/skills/plugineval
requires
["plugineval-core"]

PluginEval 2.0.0 🔬

Enhanced quality evaluation with vetting workflow. This skill wraps plugineval-core and adds:

  • Combined security + quality checks
  • Vetting workflow
  • Report generation

Use When

  • Evaluating skills before installation
  • Combined security + quality vetting
  • Publishing with quality badges

Dependencies

Required: plugineval-core

clawhub install plugineval-core

Input / Output

Input: Skill name or path

Output: Combined security + quality report

Quick Start

# Vetting workflow (Security + Quality)
~/.openclaw/skills/plugineval/scripts/vet.sh weather-pollen

# Or use core directly
python3 ~/.openclaw/skills/plugineval-core/scripts/eval.py --layer1 <skill>

Examples

Vetting a Skill

vet-skill weather-pollen

# Output:
# ════════════════════════════════════════════════════
# Skill Vetting: weather-pollen
# ════════════════════════════════════════════════════
#
# [1/3] Security Scan (ClawDefender)
# ─────────────────────────────────────────
#   ✓ Clean
#
# [2/3] Quality Evaluation (PluginEval)
# ─────────────────────────────────────────
#   Final: 81 | Badge: Gold ★★★★
#
# [3/3] Anti-Pattern Detection
# ─────────────────────────────────────────
#   ✓ No anti-patterns

References

  • EXTERNAL.md - External dependencies documentation
  • plugineval-core - Core evaluation engine

Changelog

v2.0.0 (2026-04-08)

  • Now wraps plugineval-core (separate skill)
  • Added dependency management
  • Simplified structure
  • Platinum badge quality

v1.3.0 (2026-04-08)

  • Version sync fix
  • Added source link
  • Added EXTERNAL.md documentation

v1.2.0 (2026-03-31)

  • Added Layer 3: Auto-Fix
  • Added vet-skill.sh

v1.0.0 (2026-03-31)

  • Initial release

Requires: plugineval-core | Version: 2.0.0