@pwddd/skills-scanner 3.0.16 → 3.0.17

package/README.md

@@ -38,7 +38,7 @@ openclaw plugins install @openclaw/skills-scanner
           "useLLM": false,
           "policy": "balanced",
           "preInstallScan": "on",
-          "onUnsafe": "quarantine"
+          "onUnsafe": "warn"
         }
       }
     }
@@ -60,9 +60,9 @@ openclaw plugins install @openclaw/skills-scanner
   - `on`: 启用（推荐）
   - `off`: 禁用
 - `onUnsafe`: 发现不安全 Skill 的处理方式
-  - `quarantine`: 移入隔离目录（推荐）
+  - `warn`: 仅警告，不处理（推荐）
+  - `quarantine`: 移入隔离目录
   - `delete`: 直接删除
-  - `warn`: 仅警告，不处理
 
 ## 使用方法
 
@@ -269,7 +269,7 @@ MIT
 - `useLLM`: 启用 LLM 语义分析
 - `policy`: 扫描策略 (`strict` / `balanced` / `permissive`)
 - `preInstallScan`: 安装前扫描 (`on` / `off`)
-- `onUnsafe`: 不安全时的处理 (`quarantine` / `delete` / `warn`)
+- `onUnsafe`: 不安全时的处理 (`warn` / `quarantine` / `delete`)
 - `injectSecurityGuidance`: 向 AI 系统提示词注入安全规则（默认 `true`）
 
 ## 🆕 AI 安全提示功能

package/index.ts

@@ -49,7 +49,7 @@ export default function register(api: OpenClawPluginApi) {
   const useLLM = cfg.useLLM ?? false;
   const policy = cfg.policy ?? "balanced";
   const preInstallScan = cfg.preInstallScan ?? "on";
-  const onUnsafe = cfg.onUnsafe ?? "quarantine";
+  const onUnsafe = cfg.onUnsafe ?? "warn";
   const injectSecurityGuidance = cfg.injectSecurityGuidance ?? true;
   const enablePromptInjectionGuard = cfg.enablePromptInjectionGuard ?? false;
   const enableHighRiskOperationGuard = cfg.enableHighRiskOperationGuard ?? false;

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "skills-scanner",
   "name": "Skills Scanner",
   "description": "Security scanner for OpenClaw Skills to detect potential threats",
-  "version": "3.0.16",
+  "version": "3.0.17",
   "author": "pwddd",
   "skills": ["./skills"],
   "configSchema": {
@@ -47,8 +47,8 @@
       "onUnsafe": {
         "type": "string",
         "enum": ["quarantine", "delete", "warn"],
-        "description": "Action to take when unsafe Skill is detected: quarantine (recommended) / delete / warn",
-        "default": "quarantine"
+        "description": "Action to take when unsafe Skill is detected: quarantine / delete / warn (recommended)",
+        "default": "warn"
       },
       "injectSecurityGuidance": {
         "type": "boolean",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pwddd/skills-scanner",
-  "version": "3.0.16",
+  "version": "3.0.17",
   "description": "OpenClaw Skills security scanner plugin - detect malicious code, data exfiltration, and prompt injection",
   "type": "module",
   "main": "./index.ts",

package/src/config.ts

@@ -92,7 +92,7 @@ export const skillsScannerConfigSchema: OpenClawPluginConfigSchema = {
     },
     onUnsafe: {
       label: "不安全处理",
-      help: "quarantine=隔离（推荐）/ delete=删除 / warn=仅警告"
+      help: "warn=仅警告（推荐）/ quarantine=隔离 / delete=删除"
     }
   }
 };
@@ -142,7 +142,7 @@ export function generateConfigGuide(
     '          "useLLM": false,',
     '          "policy": "balanced",',
     '          "preInstallScan": "on",',
-    '          "onUnsafe": "quarantine"',
+    '          "onUnsafe": "warn"',
     '        }',
     '      }',
     '    }',
@@ -158,7 +158,7 @@ export function generateConfigGuide(
     "4. useLLM        false=不使用 LLM（推荐），true=语义分析",
     "5. policy        strict / balanced（推荐）/ permissive",
     "6. preInstallScan on=监听新 Skill 并自动扫描（推荐），off=禁用",
-    "7. onUnsafe      quarantine=隔离（推荐），delete=删除，warn=仅警告",
+    "7. onUnsafe      warn=仅警告（推荐），quarantine=隔离，delete=删除",
     "",
     "🚀 快速开始：",
     "  编辑配置文件后重启 Gateway",