GitHub DNS 修复助手。解决 GitHub 访问问题。当用户遇到 GitHub 无法访问、DNS 解析失败、连接超时等问题时使用此技能。

This tool does what it says (it tries to fix GitHub connectivity by adding hosts entries), but it has two main risks you should consider before installing or running it: 1) Do not blindly change /etc/hosts ownership/permissions. The SKILL.md suggests chown/chmod so the script can run without sudo — this is unsafe. Prefer running the script with sudo only when needed, and avoid changing file ownership. Restoring proper root ownership and permissions is important for system security. 2) The script fetches hosts data from third‑party URLs (several proxies/mirrors are listed, including ghproxy/ghp.ci and a raw.hellogithub.com source). Hosts files can redirect domains to arbitrary IPs; if the fetched content is malicious, it can redirect github.com and related domains to attacker servers. Always inspect any fetched hosts content before applying it. Better: run the script in check mode (--check) to diagnose, fetch the hosts content manually (curl the URL), review the contents, and only then apply trusted, verified entries. Practical precautions: - Review the full script (including the truncated portion) before use to ensure there is no hidden exfiltration or network callbacks beyond obvious hosts fetching. - Do not run the suggested chown/chmod commands. Instead, run the script with sudo when writing /etc/hosts, or manually append vetted entries to /etc/hosts. - Prefer using official or well-known sources; avoid obscure proxy domains unless you trust them. Verify the IPs in any hosts list by independent means (e.g., known GitHub IP ranges, DNS over trusted resolvers). - Keep backups (the script already makes backups), and verify the backup files are correct before proceeding. If you do run the script, confirm you can restore /etc/hosts from backup and restore original ownership to root afterwards. - If you are unsure, run the tool in a disposable VM or container first. What would change this assessment: seeing the remainder of the script (truncated in the provided copy) to confirm there are no remote command executions, outbound callbacks, logging to external endpoints, or hidden exfiltration routines. If the rest of the script only formats/validates and writes vetted host entries, the risk is still present but more explainable (still proceed with caution).

Type: OpenClaw Skill Name: github-dns-helper Version: 1.0.3 The skill facilitates modifying the system's hosts file to resolve GitHub access issues but includes highly insecure instructions in SKILL.md that advise users to change the ownership of /etc/hosts to a non-root user (e.g., sudo chown $(whoami) /etc/hosts). This permanently weakens system security, allowing any user-level process to redirect network traffic without authentication. Additionally, the script scripts/fix_github_dns.py fetches host configurations from various third-party URLs (e.g., raw.hellogithub.com, ghproxy.com) and executes system commands via shell=True, posing risks of DNS hijacking if the sources are compromised or shell injection.