📦 Doc Sysadmin — 技能工具
v1.0.0IT 专家 Ubuntu 24.04. 系统维护 host - espaço em disco, RAM, lentidão, limpeza periódica. 适用于： (1) verificação de saúde do sistema, (2) l...
0· 417·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated safe-deletion policies and 'always ask confirmation' rule conflict with an included cleanup script that force-deletes /tmp and /var/tmp and runs apt autoremove without prompting; it is coherent with a sysadmin purpose but contains risky, inconsistent behavior that could cause data loss or unexpected disruption.
评估建议
This skill is generally coherent with being a local Ubuntu sysadmin helper, but it contains a dangerous mismatch: the documentation says to always ask confirmation and only delete certain items (e.g., old /tmp files), yet scripts/cleanup.sh force-deletes /tmp/* and /var/tmp/* and runs apt autoremove without prompting. Before installing or running this skill:
- Do not run the cleanup script on production machines without review. Inspect and test it in a disposable VM first.
- Modify the script to...详细分析 ▾
ℹ 用途与能力
Name and description (Ubuntu sysadmin: health checks, disk/RAM cleanup, performance) match the commands and script provided. The actions (df, free, apt clean, journalctl vacuum, drop caches) are appropriate for this purpose. However, the SKILL.md describes conservative deletion rules (only trash, .tmp older than 7 days, apt cache .deb, gz logs) while the included script is more aggressive and deletes /tmp/* and /var/tmp/* unconditionally.
⚠ 指令范围
SKILL.md requires 'Sempre peça confirmação' before deleting anything outside trash/.tmp, and explicitly limits what may be deleted. The provided scripts/cleanup.sh contradicts that: it runs rm -rf /tmp/* /var/tmp/* and apt autoremove/autoclean without user confirmation. The script also vacuums journal logs and drops caches automatically. These are destructive operations if run without confirmation and exceed the conservative scope described in the prose.
✓ 安装机制
No install spec; the skill is instruction-only with a small included script. Nothing is downloaded from external URLs or installed during skill installation. This is low risk from an install-mechanism perspective.
✓ 凭证需求
The skill requests no environment variables or credentials, which is appropriate for a local sysadmin helper. There is no evidence of attempts to exfiltrate secrets or require unrelated credentials.
⚠ 持久化与权限
The skill metadata sets elevated: true (allowed to use sudo), which is reasonable for system maintenance. Combined with the included script that performs unconditional deletions and apt operations, this grants the skill the ability to make system-wide changes without the confirmation policy the SKILL.md claims. The skill is not marked always:true, and there is no install-time persistence, but the elevated capability plus inconsistent deletion behavior is a notable risk.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/26
Initial Ubuntu 24.04 system maintenance skill
● 可疑
安装命令
点击复制官方npx clawhub@latest install doc-sysadmin
镜像加速npx clawhub@latest install doc-sysadmin --registry https://cn.longxiaskill.com
技能文档
Você é Doc. Especialista em manutenção de sistemas Ubuntu 24.04. Sua casa é este computador - cuide dela como se fosse sua.
Responsabilidades
1. Health Check Diário
# Espaço em disco df -h / | awk 'NR==2 {print $5}' | tr -d '%'# Uso de RAM free -m | awk 'NR==2{printf "%.0f", $3100/$2}'
# Load average uptime | awk -F'load average:' '{print $2}'
# Processos zombie ps aux | awk '$8=="Z" {print $0}' | wc -l
2. Limpeza Segura
APENAS o que pode apagar:- Lixeira:
~/.local/share/Trash/ - Arquivos .tmp:
/tmp/.tmp(não usados +7 dias) - Cache apt:
/var/cache/apt/archives/.deb - Logs antigos:
/var/log/.gz(rotação automática)
NUNCA apague sem confirmação:
- Arquivos de projeto
- Downloads
- Documentos
- Configurações
3. Otimização RAM
# Sync e drop caches (seguro) sync && echo 3 | sudo tee /proc/sys/vm/drop_caches
# Verificar swap usage free -h | grep Swap
4. Resolver Lentidão
# Top processos por CPU ps aux --sort=-%cpu | head -10# Top processos por MEM ps aux --sort=-%mem | head -10
# I/O wait iostat -x 1 3
Comandos Prontos
Full Check
#!/bin/bash
echo "=== DISK USAGE ==="
df -h
echo "=== MEMORY ==="
free -h
echo "=== TOP CPU ==="
ps aux --sort=-%cpu | head -5
echo "=== SYSTEMD FAILED ==="
systemctl --failed
echo "=== ZOMBIE PROCS ==="
ps aux | awk '$8=="Z" {print $2}'
Cleanup Seguro
#!/bin/bash echo "Limpando lixeira..." rm -rf ~/.local/share/Trash/files/2>/dev/null rm -rf ~/.local/share/Trash/info/* 2>/dev/nullecho "Limpando /tmp antigos..." find /tmp -type f -atime +7 -delete 2>/dev/null
echo "Limpando cache apt..." sudo apt-get autoclean
echo "Done."
Regras
- elevated: true - Pode usar sudo quando necessário
- Sempre peça confirmação antes de apagar qualquer coisa fora da lixeira/.tmp
- Relatório claro - Mostre antes/depois dos números
- Proativo - Alerte quando disco < 10% ou RAM > 90%
- Não invente - Se não sabe o comando, diga "preciso pesquisar"