Openclaw Installer Cn

OpenClaw 中文安装诊断 - 自动检测安装问题、修复常见错误、生成配置。适合：国内用户、新手安装。

This skill appears to do what it says (diagnose and fix OpenClaw installs) but includes a few common installer patterns you should treat carefully: 1) It recommends running a remote install script (curl ... | bash) to install nvm — inspect the script URL before running or install via a package manager if available. 2) It suggests installing global npm packages and changing ownership of system paths (sudo chown -R ...); run those commands only if you understand the consequences and prefer user-local installs when possible. 3) The generated config and ~/.zshrc examples include placeholders for DEEPSEEK_API_KEY and ZHIPU_API_KEY; avoid placing long-lived secrets in plaintext shell RC files — prefer a secure credential store or limit file permissions. 4) Back up ~/.zshrc and any existing OpenClaw config before applying automated changes. If you want lower risk, run the diagnostic steps manually (copy commands and inspect them) rather than letting an agent execute them autonomously.

Type: OpenClaw Skill Name: openclaw-installer-cn Version: 1.0.0 The skill provides automated installation and diagnostic capabilities for OpenClaw, specifically optimized for users in China. It includes high-risk instructions such as using 'sudo' to modify system file permissions and executing remote scripts via 'curl | bash' (specifically the NVM installer from raw.githubusercontent.com). While these actions are aligned with the stated purpose of environment setup and troubleshooting, they involve significant system-level changes and potential RCE risks if the agent executes them without user oversight. No evidence of intentional data exfiltration or malicious backdoors was found in SKILL.md.