Henry Skill Installer — Henry 技能安装器
v1.0.0Henry 技能安装器工具。
0· 314·2 当前·2 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions mostly match its stated purpose (scaffolding local skills), but a few inconsistencies and an ambiguous directive to 'call exec' warrant caution before installing.
评估建议
This skill is mostly coherent for local scaffolding, but take these precautions before installing: 1) Confirm the hard-coded workspace path (/Users/clawdbot/.openclaw/workspace/skills/) matches where you want files created — if not, request or edit the SKILL.md to accept a configurable path. 2) Ask the author to clarify what they mean by 'Never print tool JSON; call exec.' and to narrow which commands may be executed (avoid broad 'exec' instructions). 3) Note SKILL.md references /usr/bin/tee and...详细分析 ▾
ℹ 用途与能力
The name/description claim to scaffold new skills in the workspace and the SKILL.md contains a step-by-step scaffolding workflow that fits that purpose. Minor mismatch: SKILL.md prefers using /usr/bin/tee and /bin/cat for writes/verifications but the skill declares no required binaries — this is a small documentation/metadata inconsistency that should be clarified.
⚠ 指令范围
Instructions limit writes to a single hard-coded path (/Users/clawdbot/.openclaw/workspace/skills/) and forbid deletions and network calls, which keeps scope narrow. However the line 'Never print tool JSON; call exec.' is ambiguous: it encourages executing commands rather than showing tool manifests and could give the agent broad discretion to run shell commands. Because the skill is instruction-only and relies on the agent to run commands (tee/cat/exec), that ambiguity increases risk and should be clarified.
✓ 安装机制
There is no install spec and no code files — the skill is instruction-only. That minimizes the risk of arbitrary code being downloaded and executed at install time.
✓ 凭证需求
The skill does not request environment variables, credentials, or config paths beyond the single workspace path it intends to write to. Required privileges appear proportionate to the stated goal.
✓ 持久化与权限
always is false and the skill does not request persistent or cross-skill modifications. Autonomous invocation is allowed (platform default) but is not combined with broad credentials or persistent privileges here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/3
Initial release of henry-skill-installer. - Scaffolds new skills safely within <workspace>/skills/. - Ensures files are never deleted unless explicitly instructed. - Writes files using /usr/bin/tee and verifies with /bin/cat for safety. - Operates only within /Users/clawdbot/.openclaw/workspace/skills/. - Guides users to provide a skill name and specification, then generates a folder and minimal SKILL.md. - Verifies new skills appear in the openclaw skills list.
● 无害
安装命令 点击复制
官方npx clawhub@latest install henry-skill-installer
镜像加速npx clawhub@latest install henry-skill-installer --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制