Skill Compliance
Skill上架合规检查器（面向国内平台）。在上传前检查skill是否符合国内监管要求，包括金融敏感词、免责声明、安全红线等。
ChengQian
@cqdev-ai
What This Skill Does
Pre-flight compliance checker for AI skills targeting Chinese platforms. Scans skill files for financial sensitive terms, missing disclaimers, exaggeration claims, security redlines (subprocess/exec/eval), privacy gaps, and regulatory requirements (ICP, AIGC labeling, algorithm filing). Outputs a scored report with pass/fix/reject verdicts.
Replaces manual compliance review by automating checks against Chinese advertising law, financial regulations, and platform-specific security redlines.
When to Use It
- Check a skill for financial sensitive terms before uploading to SkillHub or Feishu
- Verify that a skill includes a required disclaimer for investment or legal advice
- Scan skill scripts for security redlines like subprocess, exec, or eval
- Batch audit multiple skills for compliance before a platform release
- Generate a compliance report with scores and improvement recommendations
Install
$ openclaw skills install @cqdev-ai/skill-complianceSkill Compliance Check
功能
上传 skill 到 SkillHub 前，用本工具做一次快速合规预检：
| 检查项 | 内容 |
|---|---|
| FINANCE | 荐股用语、投资建议、保证收益、需要资质的用语 |
| DISCLAIMER | 是否在显眼位置有免责声明（投资/法律类） |
| EXAGGERATION | 极限词（最好、第一、全网唯一）、夸大描述 |
| SECURITY | subprocess/exec/eval 红线、JSON合法性、版本号格式 |
| PRIVACY | 数据隐私合规（个人信息收集声明、用户同意机制、数据出境合规） |
| REGULATORY | 专项监管合规（ICP备案、AIGC标识、算法备案、未成年人保护、医疗红线等） |
| RECOMMENDATIONS | 基于检测结果给出改进建议 |
使用方法
# 全面检查
python3 scripts/comply.py check --dir ../stock-planner/
# 仅检查免责声明
python3 scripts/comply.py disclaimer --dir ../pipl-compliance/
# 仅扫描敏感金融用语
python3 scripts/comply.py keywords --dir ../privacy-check/
# 批量检查所有skill
python3 scripts/comply.py summary --dir ../
# 输出 JSON 报告
python3 scripts/comply.py check --dir ../stock-planner/ --format json
# 输出到文件
python3 scripts/comply.py check --dir ../stock-planner/ --output report.json
评分规则
| 扣分 | 等级 |
|---|---|
| -30 / 项 | Critical（安全红线、医疗红线） |
| -15 / 项 | High（隐私合规、金融敏感词、缺免责声明） |
| -5 / 项 | Medium（极限词、JSON问题） |
| -2 / 项 | Low（建议性） |
| ≥70分 | PASS — 可上架（无 redline 触发） |
| 40–69分 | NEEDS_FIX — 建议修复后再上传 |
| <40分 | REJECT — 强烈不建议上传 |
法律免责声明
本工具仅为辅助检查参考，不构成任何形式的合规保证。最终合规责任由 skill 开发者自行承担。
Top skills in this category
Skill Vetter
@spclaudehomeSecurity-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
Skill Vetter - Pre-Install Security Review
@donovanpankratz-delSecurity vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification L...
Anti-Injection-Skill
@georges91560Detect prompt injection, jailbreak, role-hijack, and system extraction attempts. Applies multi-layer defense with semantic analysis and penalty scoring.
Skill Vetter 1.0.0
@fedrov2025Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Skillscanner
@rexshangSecurity scanner for ClawHub skills from Gen Digital. Looks up skill safety via the scan API.