← Back to Skills Marketplace
wzj666666

qg-skill-sync

by wzj666666 · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
333
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install qg-skill-sync
Description
从团队 Git 仓库同步最新技能到本机 OpenClaw。支持首次设置、定时自动更新、手动同步和卸载。当用户需要同步技能、设置技能同步、安装或更新团队技能,或提到「技能同步」「同步技能」时使用。
Usage Guidance
这项技能本身功能与说明一致,但它会把远端仓库的内容直接写入你的 OpenClaw skills 目录,并且可以通过定时任务自动更新。只在你完全信任目标仓库时使用 (例如公司/团队受信任的私有仓库或已审核的公共仓库)。安装前建议:1) 手动审查目标仓库(尤其是任何会被安装的技能的 SKILL.md 与脚本);2) 首次用非生产/隔离会话做一次手动同步,确认行为;3) 如果需要自动更新,考虑固定到特定 commit/tag 或建立受控镜像以避免被远端意外/恶意修改;4) 记住 uninstall.sh 不会删除已同步到 ~/.openclaw/skills/ 的文件,需要手动清理不需要的技能;5) 若怀疑仓库被篡改,立即删除定时任务并清理 ~/.openclaw/skills/ 中不可信的目录。
Capability Analysis
Type: OpenClaw Skill Name: qg-skill-sync Version: 1.0.2 The skill implements an automated synchronization mechanism that pulls agent instructions (SKILL.md files) from a remote Git repository (default: github.com/wzj666666/ai-platform-skills.git) and installs them into the local OpenClaw environment. It utilizes shell scripts (setup.sh, sync.sh) and the 'openclaw cron' feature to establish persistence and perform periodic updates. While the behavior is aligned with the stated purpose of 'team skill sharing,' the ability to remotely update an agent's instruction set without manual review constitutes a high-risk supply chain vector for remote instruction injection.
Capability Assessment
Purpose & Capability
名称/描述与所需项一致:只需 git 和 bash 即可实现拉取仓库并把 skills 子目录同步到 ~/.openclaw/skills/。脚本逻辑(clone/pull + rsync)与目的匹配,没有要求与描述不符的额外权限或外部服务。
Instruction Scope
SKILL.md 明确指示运行 setup.sh、sync.sh、uninstall.sh 并创建 OpenClaw 的定时任务;这些操作会创建 ~/.qg-skill-sync、clone 任意指定仓库并将仓库内的技能目录复制到 ~/.openclaw/skills/。脚本不读取额外系统路径或未声明的环境变量,也不泄露本机数据,但会写入技能目录并覆盖(--delete),因此会安装远端任意仓库内容到本机技能集合。
Install Mechanism
无安装规范(instruction-only 风格),脚本通过 git clone/pull 获取代码,默认指向 GitHub 仓库(合理、可追溯)。没有从不可信 URL 下载可执行二进制或使用 URL 缩短器/个人服务器的高风险下载行为。
Credentials
不要求任何环境变量或凭证,声明的依赖仅为 git 与 bash,这与脚本功能相符。
Persistence & Privilege
always 未设置,skill 不会被强制常驻。但文档建议创建两个 OpenClaw 定时任务以实现自动定期同步——这会使远端仓库对本机技能的更新变为自动化,从而扩大潜在影响范围(如果仓库被篡改或不受信任,会自动把新内容写入 skills 目录)。卸载脚本仅删除 ~/.qg-skill-sync,不会删除已复制到 ~/.openclaw/skills/ 的文件。
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install qg-skill-sync
  3. After installation, invoke the skill by name or use /qg-skill-sync
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- 文档优化:定时任务的 cron 脚本新增了 --no-deliver 参数,并在说明中明确“直接执行下面的脚本”。 - 其他内容保持不变。
v1.0.1
- Changed default scheduled sync from every 5 minutes to twice daily at 10:30 and 17:30. - Now creates two separate cron jobs ("qg-skill-sync-1030" and "qg-skill-sync-1730") for scheduled updates. - Updated uninstall instructions to remove both cron jobs instead of a single job. - User confirmation message now reflects the new sync schedule.
v1.0.0
- Initial release of qg-skill-sync. - Enables syncing the latest team skills from a Git repository to the local OpenClaw instance. - Supports first-time setup, scheduled auto-sync (every 5 minutes), manual sync, and uninstall. - Provides commands and guidance for setup, manual sync, viewing logs, and uninstalling. - Requires git and bash; notifies users to open a new OpenClaw session after sync.
Metadata
Slug qg-skill-sync
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is qg-skill-sync?

从团队 Git 仓库同步最新技能到本机 OpenClaw。支持首次设置、定时自动更新、手动同步和卸载。当用户需要同步技能、设置技能同步、安装或更新团队技能,或提到「技能同步」「同步技能」时使用。 It is an AI Agent Skill for Claude Code / OpenClaw, with 333 downloads so far.

How do I install qg-skill-sync?

Run "/install qg-skill-sync" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is qg-skill-sync free?

Yes, qg-skill-sync is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does qg-skill-sync support?

qg-skill-sync is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created qg-skill-sync?

It is built and maintained by wzj666666 (@wzj666666); the current version is v1.0.2.

💬 Comments