← Back to Skills Marketplace
236
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install x-mirror
Description
x-mirror is a comprehensive mirror source management tool for various package managers. Use this skill whenever users need to configure, switch, or query pac...
Usage Guidance
This skill appears to do what it says (manage package mirrors) and asks for no secrets, but installing the underlying x-cmd runtime can be risky if you choose the one-line auto-installer. Prefer the Homebrew path (signed bottles) or the manual download+review option. Never run curl -fsSL https://get.x-cmd.com | sh on a machine with sensitive data or long-lived credentials. If you plan to install, review the install script at get.x-cmd.com and verify referenced checksums and release artifacts (and be cautious about any unfamiliar domains such as conda.prefix.dev). If you want the agent to perform installation, require explicit consent and prefer Homebrew/manual-review over the auto-install option.
Capability Analysis
Type: OpenClaw Skill
Name: x-mirror
Version: 1.0.0
The x-mirror skill is a management tool for package manager mirrors (npm, pip, brew, etc.) that interfaces with the x-cmd utility. While it references a high-risk installation method (curl|sh), the documentation in data/install.md is exceptionally transparent, categorizing risks and providing explicit instructions for the AI agent to seek user consent and avoid automatic installation in sensitive environments. No evidence of data exfiltration, obfuscation, or malicious intent was found; the skill follows responsible security practices for a CLI-based tool.
Capability Assessment
Purpose & Capability
The SKILL.md describes mirror management for many package managers and all runtime instructions call the x-cmd loader and x mirror subcommands. Requiring the x-cmd runtime (~/.x-cmd.root/X) and providing installation guidance is consistent with the stated purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions stay on-topic (listing/setting/restoring mirrors). The SKILL.md instructs the agent to source ~/.x-cmd.root/X and, if not present, to offer installation options. It does not ask the agent to read unrelated files or environment variables. However, the included installation guidance explicitly permits the agent to download and run remote install scripts (with user consent), which expands runtime behavior to executing network-fetched code — this is documented but worth flagging.
Install Mechanism
The skill is instruction-only (no package install spec), but data/install.md promotes three install paths: Homebrew (recommended, low risk), a manual download+review (medium risk), and an auto-install curl -fsSL https://get.x-cmd.com | sh (high risk). The auto-install pattern (pipe to sh) is inherently risky. The guide also references binaries from GitHub releases (normal) and packages from an unusual domain (https://conda.prefix.dev), which should be verified. Although the doc recommends verification and Homebrew, the presence of a one-line remote-exec install is the primary risk.
Credentials
The skill declares no required environment variables, no credentials, and no special config paths. The install scope is user-local (~/.x-cmd.root/) and claims no sudo required. That is proportionate for a CLI helper. Note: running the networked installer in an environment containing secrets is warned against in the doc.
Persistence & Privilege
The skill is not always-included, and it does not request elevated privileges. Installation is user-local and self-contained. The included agent workflow instructs the agent to ask the user before installing, which limits autonomous high-privilege actions. There is no instruction to modify other skills or system-wide settings beyond adding files under ~/.x-cmd.root/ and shell sourcing.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install x-mirror - After installation, invoke the skill by name or use
/x-mirror - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of x-mirror: a mirror source management tool for multiple package managers.
- Supports configuration, switching, and querying of mirrors for pip, npm, brew, apt, go, cargo, gem, and more.
- Enables listing available mirrors, viewing current configuration, restoring defaults, and optimizing download speeds.
- Especially suitable for developers in China or those needing faster package downloads.
- Compatible with POSIX Shell (sh/bash/zsh/dash/ash).
- Command examples and supported managers included in documentation.
Metadata
Frequently Asked Questions
What is Mirror Source Manager?
x-mirror is a comprehensive mirror source management tool for various package managers. Use this skill whenever users need to configure, switch, or query pac... It is an AI Agent Skill for Claude Code / OpenClaw, with 236 downloads so far.
How do I install Mirror Source Manager?
Run "/install x-mirror" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mirror Source Manager free?
Yes, Mirror Source Manager is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Mirror Source Manager support?
Mirror Source Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mirror Source Manager?
It is built and maintained by lunrenyi (@lunrenyi); the current version is v1.0.0.
More Skills