← 返回 Skills 市场

LeiAlexZhang/local-skill-installer

Name: LeiAlexZhang/local-skill-installer
Author: leialexzhang

作者 AlexCho · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ✓ 安全检测通过

247

总下载

当前安装

版本数

在 OpenClaw 中安装

/install local-skill-installer

功能描述

Install a local OpenClaw skill from a zip file by unzipping, validating, moving it into the active Skills directory, and verifying the result.

使用说明 (SKILL.md)

Local Skill Installer

Use this skill when the user wants to install a local OpenClaw skill package from a zip file on the current Linux system.

What this skill does

This skill helps install a local skill package safely.

Expected user input:

A Linux-accessible zip path, for example: /mnt/c/Users/user/Downloads/skill-vetter-1.0.0.zip

Rules

Only work with local zip files.
Prefer Linux paths, not Windows C:\... paths.
Use move, not copy, to avoid duplicate files.
Do not overwrite an existing skill folder without checking first.
If the same skill name already exists, stop and report the conflict.
Clean up temporary files after finishing.
Do not run scripts inside the zip.
Briefly report each important step.

Steps

Confirm the zip file exists.
Create a temporary extraction directory.
Unzip the package into the temporary directory.
Inspect the extracted content.
Validate that it looks like an OpenClaw skill:
- must contain SKILL.md
- may also contain _meta.json, assets, agents, references
Determine the correct active Skills directory for this OpenClaw installation.
- Prefer ~/.openclaw/skills/ for shared local skills if appropriate.
- If the current workspace has a dedicated skills/ directory and the context indicates workspace-local installation, use that instead.
Determine the final skill folder name.
If the target folder already exists:
- do not overwrite
- report the existing path and stop
Move the extracted skill folder into the Skills directory.
Verify the final folder and key files exist.
Clean up temporary files.
Tell the user:

whether installation succeeded
the final installed path
whether reload or restart is needed

Output format

Always report:

Source zip path
Extracted skill folder name
Final installed path
Validation result
Conflict result if any
Whether reload/restart is recommended

安全使用建议

This skill appears to do exactly what it says: install a local skill zip. Before using it, manually inspect the zip you plan to install (open the archive and check SKILL.md, _meta.json, and any scripts) and only install packages from trusted sources. Prefer installing into a sandbox or backup your ~/.openclaw/skills directory first. Note that the skill can be invoked by the agent (default behavior) — avoid giving the agent carte blanche to run installers on your machine or ensure you provide the precise, trusted zip path at invocation.

功能分析

Type: OpenClaw Skill Name: local-skill-installer Version: 1.0.1 The skill is a utility designed to install local OpenClaw skill packages from ZIP files. It includes explicit safety instructions for the agent, such as forbidding the execution of scripts within the ZIP, preventing overwrites of existing skills, and ensuring temporary file cleanup. No indicators of data exfiltration, malicious execution, or prompt injection were found in SKILL.md or _meta.json.

能力评估

✓ Purpose & Capability

The name/description (local installer) align with the instructions: unzip a local package, validate its SKILL.md/_meta.json, and move it into an OpenClaw skills directory. No unrelated credentials, binaries, or config paths are requested.

✓ Instruction Scope

SKILL.md limits actions to local zip handling, validation, moving files, and cleanup. It explicitly forbids running scripts inside zips and avoids overwriting existing skill folders. The only potentially broad step is determining the 'correct' skills directory (workspace vs ~/.openclaw), which is reasonable for an installer.

✓ Install Mechanism

This is instruction-only with no install spec and no downloads or archive extraction by the skill itself; nothing is written to disk by the skill bundle. Risk from the install mechanism is minimal.

✓ Credentials

No environment variables, credentials, or config paths are requested. The skill's actions (file system move of a local zip's contents) are proportional to its purpose.

ℹ Persistence & Privilege

The skill is not marked always:true (good). Model invocation is allowed (default), so an agent could call this skill autonomously; however, SKILL.md expects an explicit local zip path from the user. Be aware autonomous invocation combined with broadly accessible local files could allow an agent to install local packages without explicit interactive consent if the agent chooses a local path.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install local-skill-installer
安装完成后，直接呼叫该 Skill 的名称或使用 /local-skill-installer 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

- Initial release of local-skill-installer. - Added SKILL.md with usage instructions, installation rules, and detailed process steps. - Added _meta.json with skill metadata for package management.

v1.0.0

local-skill-installer v1.0.0 - Initial release for installing local OpenClaw skill packages from a zip file. - Validates the skill structure before installation (must contain SKILL.md). - Prevents overwriting existing skills; reports conflicts clearly. - Moves (not copies) the skill folder into the appropriate Skills directory. - Cleans up temporary files after installation and summarizes key results for the user.

元数据

Slug local-skill-installer

版本 1.0.1

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 2

常见问题