← Back to Skills Marketplace
toolchain-bootstrap
by
TurinFohlen
· GitHub ↗
· v1.0.0
· MIT-0
117
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install toolchain-bootstrap
Description
OpenClaw 新容器初始化工具链引导程序。自动从 GitHub 下载 toolchain_v2.tar.gz， 解压到 /workspace，配置 PATH 环境变量，验证所有已安装语言/工具。 适用场景：新容器启动后一行命令完成全部开发环境配置。
Usage Guidance
This skill appears to do what it says (download and install a toolchain into /workspace and configure PATH), but exercise caution before running setup in a sensitive environment: 1) The script downloads and extracts a large tarball from a third-party GitHub release and does not verify checksums or signatures — inspect the release and repository first. 2) The tarball will place binaries/libraries on disk; run the install only in a disposable or isolated container if you do not fully trust the author. 3) The installer will append environment variables to ~/.bashrc (persistence). If you want to minimize risk, run the 'verify' or 'list' commands (which do not download) first, or manually download and inspect the tarball (e.g., list its contents and scan for unexpected executables) before extracting. 4) Prefer running the setup after confirming the GitHub repo owner and release integrity (checksum/GPG) or adding an explicit verification step.
Capability Analysis
Type: OpenClaw Skill
Name: toolchain-bootstrap
Version: 1.0.0
The skill downloads and extracts a large (~590MB) unverified binary archive from a personal GitHub repository (TurinFohlen/openclaw-toolchain) and modifies the user's ~/.bashrc for environment persistence. While these actions are consistent with the stated purpose of bootstrapping a development toolchain, the lack of checksum/signature verification for the remote payload and the automated modification of shell profiles represent a significant supply chain risk. Primary files: scripts/bootstrap.sh and scripts/setup-env.sh.
Capability Assessment
Purpose & Capability
Name/description, skill.toml invocation, SKILL.md and the two scripts all consistently implement a toolchain bootstrapper that downloads a release tarball, extracts it to /workspace, writes environment variables, and verifies installed tools. Requested resources and actions align with the stated purpose; no unrelated credentials or services are requested.
Instruction Scope
The runtime instructions and scripts download a large archive from GitHub and extract it into /workspace, then write environment variables to /workspace/.toolchain_env and append to ~/.bashrc if writable. The scripts do not perform integrity checks (no checksum or signature verification) and will place binaries/libraries on disk that could be executed later. While this behavior is coherent for a bootstrapper, lack of artifact verification and the persistence of shell changes are notable risks.
Install Mechanism
There is no formal install spec; the scripts perform a network download from a GitHub releases URL (a well-known host) and extract the archive. Download-from-GitHub + extract is expected for this use case, but extraction of an unverified 590MB archive is a moderate-to-high risk because arbitrary binaries/libraries are written to the container filesystem.
Credentials
The skill requests no secrets or external credentials. It does modify shell configuration by writing environment variables to /workspace/.toolchain_env and appending an env block to ~/.bashrc (if writable) which is appropriate for a toolchain installer but should be made explicit to users. It uses common system utilities (curl, tar, grep, awk) present in typical containers; these binaries are not declared but are standard.
Persistence & Privilege
The skill does persist environment changes (writes /workspace/.toolchain_env and appends to ~/.bashrc). always is false and it does not modify other skills or platform-wide settings. Persistence is expected for this skill, but users should be aware it changes their shell startup files.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install toolchain-bootstrap - After installation, invoke the skill by name or use
/toolchain-bootstrap - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of toolchain-bootstrap.
- Provides one-command automatic setup of multiple language toolchains in new containers.
- Downloads and extracts prebuilt toolchain archive from GitHub to /workspace.
- Configures PATH, JAVA_HOME, and related environment variables automatically in ~/.bashrc.
- Includes commands to set up, verify, and list installed tools.
- Supports Go, Java (OpenJDK), Maven, Erlang, Elixir, Rust, Ruby, Lua, Node.js, and Python.
Metadata
Frequently Asked Questions
What is toolchain-bootstrap?
OpenClaw 新容器初始化工具链引导程序。自动从 GitHub 下载 toolchain_v2.tar.gz， 解压到 /workspace，配置 PATH 环境变量，验证所有已安装语言/工具。 适用场景：新容器启动后一行命令完成全部开发环境配置。 It is an AI Agent Skill for Claude Code / OpenClaw, with 117 downloads so far.
How do I install toolchain-bootstrap?
Run "/install toolchain-bootstrap" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is toolchain-bootstrap free?
Yes, toolchain-bootstrap is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does toolchain-bootstrap support?
toolchain-bootstrap is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created toolchain-bootstrap?
It is built and maintained by TurinFohlen (@turinfohlen); the current version is v1.0.0.
More Skills