fastgithub — GitHub 加速代理
v1.0.0提供本地 GitHub 代理服务器，显著加速 Linux、macOS 和 Windows 上的 GitHub 克隆、推送和下载速度
0· 74·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidence该技能的脚本和指令旨在提供本地 GitHub 代理，但依赖于不透明的本地二进制文件（文档中引用的 tarball 不在清单中），要求安装系统 CA（高权限）并建议在故障排除中禁用 TLS 验证 — 这些不一致和高风险步骤值得谨慎对待。
评估建议
在未验证底层二进制之前，请勿安装该技能。关键考虑点：(1) 脚本预期的二进制 tarball（fastgithub-linux-x64.tar.gz）不在清单中 — 请发布者说明二进制来源并提供签名校验和。(2) 运行不透明的本地可执行文件可能进行网络 I/O 或泄露秘密；优先选择源代码或来自可信发布的二进制（例如，官方 GitHub 发布版本带校验和）。(3) 安装系统 CA 非常危险：允许代理拦截所有应用的 TLS。仅在完全信任二进制并理解风险时添加 CA；避免在存储敏感凭据的机器上使用。(4) 永远不要接受建议的全局 TLS 禁用工作流程（git http.sslVerify false）。(5) 如果您想测试，请在隔离环境（VM 或一次性容器）中运行代理，监控网络流量和日志，并在可能的情况下验证二进制的校验和或从源代码构建。...详细分析 ▾
⚠ 用途与能力
The name/description (local GitHub proxy) match the scripts' behavior (starting a local proxy binary, setting http(s)_proxy). However the SKILL.md and scripts reference a packaged binary fastgithub-linux-x64.tar.gz and a publish/fastgithub executable, but that tarball/binary is not listed in the skill file manifest. Requiring an opaque native executable is plausible for a proxy, but the missing artifact is an incoherence: install will fail or the publisher may intend to download/replace the binary later.
⚠ 指令范围
Instructions direct running the included install/start scripts, setting shell proxy env vars, and (optionally) installing a system CA certificate into the OS trust store. Installing a root/trusted CA allows interception of TLS traffic system-wide — a legitimate requirement for some local TLS-proxy accelerators but a high-risk action. The documentation also suggests disabling git TLS verification as troubleshooting (git config --global http.sslVerify false), which is insecure and unnecessary in safe deployments.
⚠ 安装机制
There is no formal install spec; this is instruction-driven and runs local shell scripts which launch an opaque native binary from a tarball. The tarball referenced in docs/scripts is not included in the provided manifest, creating an inconsistency. Running an uninspected native executable (which could make network calls or exfiltrate data) is higher risk than pure script-only skills.
ℹ 凭证需求
The skill does not request environment variables or credentials in metadata, and only sets local http_proxy/https_proxy environment variables (expected for a proxy). However, the optional system CA installation requires sudo/administrator privileges and persists system trust — this is a broader privilege than typical non-system utilities and should be justified by a verified binary.
⚠ 持久化与权限
The skill itself is not forced-always and does not modify other skills, but installing a root CA (recommended in the docs) changes system-wide trust persistently and grants the proxy the ability to MITM HTTPS traffic. That level of persistent privilege is significant and should only be granted after verifying the binary's provenance and integrity.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
FastGithub 1.0.0 – 初始版本，帮助加速 GitHub 访问体验 - 提供本地代理服务，大幅提升 GitHub 访问速度 - 一键自动安装与启动脚本，简化配置流程 - 手动安装说明，支持 Linux, macOS, Windows - 支持 Git 代理设置、CA 证书安装与常见故障排除 - 包含常用命令和触发短语，便于快速管理和诊断
● 可疑
安装命令 点击复制
官方npx clawhub@latest install fastgithub
镜像加速npx clawhub@latest install fastgithub --registry https://cn.clawhub-mirror.com
技能文档
简介
FastGithub 提供本地 GitHub 代理服务，用于加速 GitHub 的克隆、推送和下载速度，支持 Linux、macOS 和 Windows。安装与启动
- 一键自动安装与启动脚本：简化配置流程
- 手动安装说明：支持多平台
功能
- Git 代理设置
- CA 证书安装
- 常见故障排除
- 常用命令和触发短语：便于管理和诊断
注意事项
请参考安全扫描评估和建议，确保安全使用。数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制