← 返回 Skills 市场

4090ctl

Name: 4090ctl
Author: olmmlo-cmd

作者 olmmlo-cmd · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

725

总下载

当前安装

版本数

在 OpenClaw 中安装

/install 4090ctl

功能描述

Remotely manage the 4090 server via SSH to monitor Docker containers, restart services, and check system status.

使用说明 (SKILL.md)

4090 服务器控制

通过 SSH 控制 4090 服务器（192.168.199.17）。

快速命令

# Dify 状态检查
ssh -F ~/.ssh/config 4090 "docker ps -a | grep dify"

# 查看资源使用
ssh -F ~/.ssh/config 4090 "docker stats --no-stream"

# 重启 Dify
ssh -F ~/.ssh/config 4090 "cd ~/dify/docker && docker-compose restart"

# 查看日志
ssh -F ~/.ssh/config 4090 "docker logs -f docker-api-1"

常用操作

Docker 管理

# 查看所有容器
docker ps -a

# 查看资源占用
docker stats --no-stream --format 'table {{.Name}}	{{.CPUPerc}}	{{.MemPerc}}'

# 重启单个容器
docker restart docker-api-1

# 查看容器日志
docker logs -f docker-api-1

Dify 服务

服务	容器名	端口	说明
API	docker-api-1	5001	主 API
Worker	docker-worker-1	5001	异步任务
Web	docker-web-1	3000	前端界面
Plugin	docker-plugin_daemon-1	5003	插件服务
Sandbox	docker-sandbox-1	-	安全沙箱

系统监控

# CPU/内存
top -bn1 | head -5

# 磁盘使用
df -h

# 负载情况
uptime

SSH 配置

~/.ssh/config:

Host 4090
    HostName 192.168.199.17
    User olmmlo
    IdentityFile ~/.ssh/4090_key
    PasswordAuthentication no

安全使用建议

This skill will SSH to 192.168.199.17 using your ~/.ssh/config and the private key at ~/.ssh/4090_key (username 'olmmlo') — but it doesn't declare those requirements. Before installing: (1) only install if you trust the skill source and the target server; (2) verify the agent runtime is not permitted to read your ~/.ssh files unless you intend it to; (3) consider requiring the skill to declare required binaries (ssh, docker, docker-compose) and the config/key path explicitly; (4) prefer manual invocation or a restricted runtime for this skill so it cannot autonomously access your SSH key; (5) if you are unsure, test in an isolated environment or add a dedicated key with limited server privileges instead of using a personal key.

功能分析

Type: OpenClaw Skill Name: 4090ctl Version: 1.0.0 The skill is classified as suspicious due to a potential prompt injection vulnerability in `SKILL.md`. While the skill's stated purpose is remote server control via SSH, several command blocks under '常用操作' (Common Operations) are presented without an explicit `ssh` prefix. If the AI agent is designed to execute any code block it encounters, these commands (e.g., `docker ps -a`, `top`, `df -h`, `uptime`) could be executed locally on the agent's host, potentially leaking information about the agent's environment. This represents a vulnerability in the agent's interpretation rather than explicit malicious intent from the skill author. Additionally, the skill explicitly discloses the expected path for an SSH private key (`~/.ssh/4090_key`), which, while necessary for its function, is a sensitive detail.

能力评估

⚠ Purpose & Capability

Name/description say 'manage 4090 via SSH', which matches the commands in SKILL.md, but the metadata lists no required binaries, env vars, or config paths even though the instructions explicitly use ssh, docker, and refer to ~/.ssh/config and ~/.ssh/4090_key. The skill should have declared at minimum 'ssh' (and likely docker/docker-compose if run locally) and the SSH key/config path.

⚠ Instruction Scope

Runtime instructions tell the agent to run ssh -F ~/.ssh/config 4090 "..." and reference an IdentityFile path and username. That implicitly requires access to the user's ~/.ssh/config and private key and will cause the agent to read/use those secrets when invoked. The SKILL.md also includes bare docker/docker-compose commands (some prefixed by ssh, some not), which is ambiguous about where they should run and whether local docker access is expected.

✓ Install Mechanism

Instruction-only skill with no install spec — lowest install risk. Nothing will be written to disk by an installer.

⚠ Credentials

No required environment variables or primary credential are declared, yet the instructions require a private SSH key (IdentityFile) and an SSH config entry for host '4090'. That is effectively a secret/config dependency that is not declared. There are no unrelated credentials requested, but the omission means the agent or user may inadvertently expose sensitive keys.

✓ Persistence & Privilege

Skill is not always-on and does not request persistent system modifications. Autonomous invocation is allowed (platform default); combined with the undeclared key access this increases risk but by itself is not a misconfiguration.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install 4090ctl
安装完成后，直接呼叫该 Skill 的名称或使用 /4090ctl 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of the 4090ctl skill: - Provides SSH-based command shortcuts for managing a remote 4090 server. - Includes quick commands for checking Dify service status, viewing resource usage, restarting services, and viewing logs. - Documents common Docker and system monitoring operations. - Lists Dify service container names, ports, and functions in a table. - Specifies recommended SSH configuration details for access.

元数据

Slug 4090ctl

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题

4090ctl 是什么？

Remotely manage the 4090 server via SSH to monitor Docker containers, restart services, and check system status. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 725 次。

如何安装 4090ctl？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install 4090ctl」即可一键安装，无需额外配置。

4090ctl 是免费的吗？

是的，4090ctl 完全免费（开源免费），可自由下载、安装和使用。

4090ctl 支持哪些平台？

4090ctl 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 4090ctl？

由 olmmlo-cmd（@olmmlo-cmd）开发并维护，当前版本 v1.0.0。