← 返回 Skills 市场
Coding Agent Backup
作者
nickchan0412
· GitHub ↗
· v1.0.0
3166
总下载
1
收藏
37
当前安装
1
版本数
在 OpenClaw 中安装
/install coding-agent-backup
功能描述
Delegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (sp...
安全使用建议
Install only after reviewing and constraining it. Do not paste private code or secrets into it unless you accept transmission to Google/Gemini, rotate or remove the embedded API key, avoid --yolo, use disposable worktrees or clones, and manually review diffs before any commit, push, PR, or GitHub comment.
功能分析
Type: OpenClaw Skill
Name: coding-agent-backup
Version: 1.0.0
The skill is classified as suspicious due to two critical security vulnerabilities. Firstly, the `SKILL.md` instructions explicitly direct the OpenClaw agent to use the `--yolo` flag with the `codex` tool, which disables sandboxing and approval mechanisms, creating a severe risk of arbitrary code execution on the host system without oversight if the agent is compromised. Secondly, the `index.js` file contains a hardcoded Google Gemini API key (`AIzaSyCKWmPmAkZWvI2KiblawWPUESyCp9dEjk0`), which is a significant information security flaw as it exposes credentials that could be misused.
能力评估
Purpose & Capability
The documented purpose is delegation to Codex, Claude Code, OpenCode, or Pi in local workdirs, but index.js implements a stdin-driven Gemini client and transmits user prompts to generativelanguage.googleapis.com.
Instruction Scope
The instructions normalize background agents, --full-auto, --yolo with no sandbox or approvals, GitHub comments, commits, pushes, and PR creation; some of this fits coding delegation, but the examples lack strong review gates.
Install Mechanism
The package includes an executable JavaScript implementation with undisclosed outbound network behavior and a hardcoded Google API key, while the visible requirements only mention local coding-agent binaries.
Credentials
config.json enables code running and file management with a fixed /home/admin/code workdir, which is broad for a delegation helper and not tightly aligned with the documentation's path-safety guidance.
Persistence & Privilege
Long-running background sessions are disclosed, but the skill also tells spawned agents to trigger an OpenClaw system event on completion and encourages parallel autonomous sessions with mutation authority.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install coding-agent-backup - 安装完成后，直接呼叫该 Skill 的名称或使用
/coding-agent-backup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
coding-agent-backup 1.0.0
- Initial release of the coding-agent skill.
- Enables background delegation of coding tasks to Codex, Claude Code, or Pi agents using a bash-first workflow.
- Strong emphasis on pty:true (pseudo-terminal) requirement for all interactive coding agent sessions.
- Supports spawning agents in arbitrary work directories for tasks like building features, code review (in temp dirs), and refactoring.
- Provides detailed CLI usage patterns, process monitoring actions, and parallel workflow strategies with git worktrees.
- Includes clear usage boundaries: not for simple fixes, general code reading, or work in ~/clawd workspace.
元数据
常见问题
Coding Agent Backup 是什么？
Delegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (sp... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 3166 次。
如何安装 Coding Agent Backup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install coding-agent-backup」即可一键安装，无需额外配置。
Coding Agent Backup 是免费的吗？
是的，Coding Agent Backup 完全免费（开源免费），可自由下载、安装和使用。
Coding Agent Backup 支持哪些平台？
Coding Agent Backup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Coding Agent Backup？
由 nickchan0412（@nickchan0412）开发并维护，当前版本 v1.0.0。
推荐 Skills