← Back to Skills Marketplace
30
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tar-tool
Description
Create and extract tar archives with optional compression. Use for file bundling, backup, and distribution.
README (SKILL.md)
Tar - Tape Archive Utility
Create, maintain, and extract tar archives. Supports gzip, bzip2, and xz compression for efficient storage and transfer.
Usage
tar-tool [options] \x3Carchive> [files...]
Common Commands
-cf archive.tar files: Create archive-xf archive.tar: Extract archive-tf archive.tar: List contents-czf archive.tar.gz files: Create gzip compressed-cjf archive.tar.bz2 files: Create bzip2 compressed
Examples
tar-tool -cf backup.tar ./docs/
tar-tool -czf archive.tar.gz ./project/
tar-tool -xf archive.tar.gz
Usage Guidance
Use this only with trusted archives, and preferably extract into a temporary empty folder. Before installing broadly, the maintainer should add safe tar extraction checks and update the documentation so the advertised commands and compression support match the code.
Capability Analysis
Type: OpenClaw Skill
Name: tar-tool
Version: 1.0.0
The script `scripts/tar.py` uses the `tarfile.extractall()` method without any path validation or sanitization. This is a known security vulnerability (Tar Slip) that allows a specially crafted archive to perform path traversal and overwrite arbitrary files on the host system. While the tool's functionality aligns with its description in `SKILL.md`, the lack of safety checks for extraction makes it high-risk for exploitation.
Capability Assessment
Purpose & Capability
The archive purpose is coherent, but the implementation uses unfiltered extraction and does not match the documented compression and tar-style flag behavior.
Instruction Scope
The usage examples include extraction but do not warn about untrusted archives, output location, path traversal, or overwrite review.
Install Mechanism
No remote install, dependency installation, or required binary is declared; the included script is small and directly reviewable.
Credentials
Reading user-selected files and writing archives is expected, but unbounded extraction can write or overwrite local files outside the intended directory under the user's privileges.
Persistence & Privilege
The artifacts show no credentials, account access, background service, persistent memory, or network activity.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tar-tool - After installation, invoke the skill by name or use
/tar-tool - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Tar Tool?
Create and extract tar archives with optional compression. Use for file bundling, backup, and distribution. It is an AI Agent Skill for Claude Code / OpenClaw, with 30 downloads so far.
How do I install Tar Tool?
Run "/install tar-tool" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tar Tool free?
Yes, Tar Tool is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tar Tool support?
Tar Tool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tar Tool?
It is built and maintained by BIN (@dinghaibin); the current version is v1.0.0.
More Skills