← 返回 Skills 市场

Agent Quick Start

Name: Agent Quick Start
Author: yang1002378395-cmyk

作者 yang1002378395-cmyk · GitHub ↗ · v2.0.0 · MIT-0

cross-platform ⚠ suspicious

120

总下载

当前安装

版本数

在 OpenClaw 中安装

/install agent-quick-start

功能描述

Quick start templates for OpenClaw agents. Boilerplate code for research bots, content generators, task automation, and more. Jumpstart your development with...

使用说明 (SKILL.md)

Agent Quick Start

Ready-to-use templates for common OpenClaw agent patterns. Start your project faster.

Installation

npx clawhub@latest install agent-quick-start

Usage

# List available templates
node ~/.openclaw/skills/agent-quick-start/start.js list

# Create a project from a template
node ~/.openclaw/skills/agent-quick-start/start.js create \x3Ctemplate_name> \x3Cproject_path>

# Example: Create a research bot
node ~/.openclaw/skills/agent-quick-start/start.js create research-bot my-research-agent

Available Templates

1. Research Bot

🤖 Research agent with web search
📊 Summarize findings
📝 Generate reports
Use for: Research, data gathering, analysis

2. Content Generator

✍️ Generate blog posts
📱 Social media content
📧 Email drafts
Use for: Content creation, marketing, copywriting

3. Task Automator

⚡ Automate repetitive tasks
🔄 Workflows and pipelines
🎯 Scheduled jobs
Use for: Automation, scripts, workflows

4. Customer Support Bot

💬 Answer common questions
📚 Knowledge base integration
🎫 Ticket management
Use for: Customer service, FAQs, support

5. Data Processor

📊 Process data files
📈 Analysis and reports
💾 ETL operations
Use for: Data processing, analytics, ETL

Features

✅ Ready-to-use templates
✅ Copy to any directory
✅ Clear documentation
✅ Best practices included
✅ Easy to customize

Example Workflow

# 1. List templates
node ~/.openclaw/skills/agent-quick-start/start.js list

# 2. Choose a template
node ~/.openclaw/skills/agent-quick-start/start.js create research-bot ./my-bot

# 3. Customize the project
cd ./my-bot
# Edit files, add your logic

# 4. Run your agent
openclaw run

Need Help?

If you need help with OpenClaw:

📧 Installation Service: ¥99-299
🔗 Landing Page: https://yang1002378395-cmyk.github.io/openclaw-install-service/

License

MIT

安全使用建议

This package is a templates generator and will create scripts in whatever project path you supply. Before running any generated scripts, inspect the files created (especially custom/research.js). Note two issues: (1) research.js uses execSync to run node ~/.openclaw/workspace/custom/free_search.js and ~/.openclaw/skills/openclaw-memorize/memorize.js even though those dependencies are not documented — if attacker-controlled files exist at those paths they would be executed; (2) the execSync calls interpolate user-provided topics into shell commands (e.g., node ... 'query' or "${topic}"), which is vulnerable to command injection if the topic contains shell metacharacters. Recommended precautions: (a) only create projects in a safe sandbox or non-sensitive directory; (b) inspect and/or edit generated files before running them; (c) remove or fix execSync usage to spawn with argument arrays or properly escape/sanitize inputs; (d) only run if you trust or have audited any referenced scripts under ~/.openclaw; and (e) consider adding explicit documentation or tests for the external dependencies before using the research template. If you want, I can highlight exact lines to fix for command-injection mitigation or produce a safer variant of the templates.

功能分析

Type: OpenClaw Skill Name: agent-quick-start Version: 2.0.0 The skill provides boilerplate templates for new projects, but the 'research-bot' template generated by 'start.js' contains a critical shell command injection vulnerability in the 'custom/research.js' file. It uses 'execSync' to execute a search script with an unsanitized '${query}' parameter, which would allow arbitrary command execution if an agent or user provides a crafted research topic. Additionally, the 'SKILL.md' file promotes a paid installation service (¥99-299), which is atypical for standard skill bundles.

能力评估

⚠ Purpose & Capability

The package is a quick-start templates kit and mostly only needs to write files — that matches the description. However some template files (research.js) call other scripts under ~/.openclaw (free_search.js and openclaw-memorize/memorize.js). Those external dependencies are not documented in SKILL.md and are not declared anywhere, which is an incoherence.

⚠ Instruction Scope

SKILL.md instructs only listing/creating templates. The created template code, however, instructs the runtime to execute local scripts in the user's home directory via child_process.execSync. That expands scope beyond creating templates: if those files exist they will be executed. The SKILL.md does not warn about or document these external executions.

✓ Install Mechanism

No install spec and no external downloads — the skill is instruction-only plus a single start.js that writes template files. This is low-risk from an install-mechanism perspective.

ℹ Credentials

The skill declares no required env vars or credentials (which is appropriate). Template code uses process.env.HOME and hardcoded home-paths; that is plausible but implies the code will touch user-home locations. There are no requests for unrelated secrets, but the reliance on hardcoded paths (~/.openclaw/...) is undeclared and could be abused if those locations are populated by third-party or attacker files.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills' configs, and only writes files to the user-specified project path. It does reference other skill paths but does not itself request permanent agent presence.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install agent-quick-start
安装完成后，直接呼叫该 Skill 的名称或使用 /agent-quick-start 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v2.0.0

Version 2.0.0 of agent-quick-start - No file changes detected in this release. - No updates to templates, documentation, or features. - All functionality remains unchanged from the previous version.

v1.0.0

agent-quick-start v1.0.0 - Initial release featuring quick start templates for OpenClaw agents. - Includes boilerplate code for research bots, content generators, task automation, customer support bots, and data processors. - Provides easy installation and usage instructions. - Templates follow best practices, are ready to use, and simple to customize. - Documentation and example workflows included to help kickstart new OpenClaw projects.

元数据

Slug agent-quick-start

版本 2.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题