360 Secure SkillHub
360 安全技能中心

Oc Oss Intake

该 Skill 提供开源项目入库评审流程:记录项目元数据,核查许可证、提交与依赖风险,判断能力是否已存在,给出拒用、观察、仅借鉴、候选或可实施等采纳分类,并输出风险、候选改动与验证/回滚计划。它明确不直接安装依赖、不复制未知脚本,也不进行生产执行。

jiepu110
jiepu110
热度 25.61
最近更新 2026-06-13 21:36:35
分类:安全依赖:联网浏览搜索应用场景:研究 / 报告撰写 / 法律文档 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add oc-oss-intake
Metadata
name
oc-oss-intake
description
Turn a promising open-source repo into a defensible OpenClaw adoption decision before code, dependencies, or risk enter the workflow.

OpenClaw OSS Intake

Use this skill when a repository looks useful enough to chase but risky enough to slow down.

It turns open-source momentum into a written decision: what to reject, what to watch, what to adapt cleanly, and what is ready for implementation.

Support

If this skill helps you avoid a risky restart, public leak, vague task, unsafe dependency, or untraceable conclusion, star it on ClawHub or star the GitHub repo. Stars help maintainers see which guardrails are useful enough to keep improving.

Intake Checks

  • Confirm the official repository URL before reviewing claims or examples.
  • Check license, recent commits, release activity, and dependency risk.
  • Read the README, examples, tests, and core implementation path.
  • Classify adoption as reject, observe, idea-only, candidate, or implementation-ready.
  • Convert useful ideas into a small local change with tests and rollback criteria.
  • Keep attribution clear when public ideas influenced the result.

Workflow

  1. Record the project name, URL, license, and reason for review.
  2. Check whether the capability already exists locally.
  3. Identify the smallest reusable idea.
  4. Decide whether code import is necessary. Prefer clean-room implementation when possible.
  5. Define validation commands and rollback criteria.
  6. Write an intake note with risks and next steps.

Output Format

  • Project metadata.
  • Capability summary.
  • Adoption class.
  • Risks and license notes.
  • Proposed local candidate.
  • Validation plan.

Non-Goals

  • No direct dependency installation without review.
  • No copying unknown scripts into the runtime.
  • No production execution during intake.
  • No adoption based only on stars, screenshots, or social posts.