360 Secure SkillHub
360 安全技能中心

ClawCode Lens

这是一款本地运行的多语言代码分析工具,无需外部API,支持离线使用。核心功能包括:结构化代码逻辑拆解解释、本地安全扫描(检测硬编码密钥、SQL注入等漏洞)、给出带示例的代码优化建议;还支持一键生成综合分析报告。另有付费云扫描功能,但勿用于机密代码。输入为代码文件+命令行参数,输出为结构化说明或Markdown报告,适用于离线代码分析、安全排查、代码优化场景。

northcap-group
热度 30.57
最近更新 2026-08-22 03:13:57
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:代码审查 / 调试排错 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add clawcode-lens
Metadata
name
ClawCode Lens
slug
clawcode-lens
version
1.0.1
description
Explain code in any language with structured syntax/logic breakdown, local security scan, and improvement suggestions. 100% lokal — private og hurtig, ingen netværkskald, ingen API-nøgle.
metadata
{"clawbot":{"requires":{"bins":["python3"]},"notes":"100% lokal — ingen netværkskald, ingen API-nøgle."}}

ClawCode Lens

Code explanation and analysis tool — inspired by Dify Code Interpreter, improved:

🆕 Unique features (not in the original)

Feature 1: Runs 100% LOCALLY — no external API required

code directly with structured rules — works offline, free and instantly:

python3 scripts/explain.py code.py --lang python
python3 scripts/explain.py main.js --lang javascript --detail

Feature 2: Security scanning (local)

Finds vulnerabilities: hardcoded keys, SQL injection, eval() misuse, unsafe exec calls, weak passwords, unsafe imports:

python3 scripts/security_scan.py code.py --out report.md

Feature 3: Improvement suggestions

Gives concrete, prioritized suggestions: complexity, repeated code, missing error handling, performance bottlenecks and best practices — with code examples:

python3 scripts/improve.py code.py --out suggestions.md

How to use

Explain code (structured)

python3 scripts/explain.py file.py --lang python
# Output: overview → key functions → logic flow → edge cases

Supported languages

Python, JavaScript/TypeScript, C/C++, Java, C#, Go, Rust, SQL, Bash, PHP, Ruby — auto-detected from file type.

Combine everything in one call

python3 scripts/explain.py app.py --security --improve --out full-report.md

# 2) Deep scan (PAID call — uploads your code + costs per call)
python3 scripts/code_scan.py app.py
  • Price: $0.005/call · $25/mo
  • ⚠️ Paid call — each run charges your key AND uploads the selected source file to the external API. Do not use on confidential/proprietary code.

Example output (security scan)

🔒 Security scan: app.py
  [HIGH]    Line 45: SQL string built with f-string — injection risk
  [INFO]    Line 78: eval() — avoid unless strictly necessary

Feedback

  • Helpful? → clawhub star clawcode-lens