← 返回 Skills 市场
马斯克进化系统
作者
skillforge-jojo
· GitHub ↗
· v1.0.0
· MIT-0
78
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install maske-evolution
功能描述
统一进化系统,自动化技能发现、评估、安装、进化。当用户需要技能管理、系统进化、能力评估、技能搜索安装时使用此技能。支持ClawHub技能搜索、VFM评估、自动安装、每日进化流程。
安全使用建议
This skill is 'suspicious' because its documentation promises automated discovery and installation of third‑party skills but the package doesn't declare the CLIs, credentials, or platform access needed and the shipped code doesn't implement the claimed integrations. Before installing or enabling it, consider:
- Verify the source and trustworthiness of the skill (homepage and author are missing).
- Do not enable fully autonomous operation until you understand exactly what installers it will call and what code those installers will fetch. Prefer manual approval for each install.
- Ensure required CLIs (clawhub, skillhub) exist and are trusted; ask the author to list required binaries and permissions.
- Inspect any skill the system would install (review code) before permitting execution; test in a sandbox environment.
- Ask the author to remove hardcoded filesystem paths and to clarify where logs and artifacts will be written.
- If you must use it, restrict its network and filesystem permissions and avoid granting credentials for private repos unless absolutely necessary.
If the author can provide (a) an implementation that actually integrates with the listed platforms, (b) an explicit list of required CLIs/permissions, and (c) safety controls for auto‑install (e.g., allowlist, signature checks, manual approval), reassess — that could move this from 'suspicious' toward 'benign'.
功能分析
Type: OpenClaw Skill
Name: maske-evolution
Version: 1.0.0
The skill defines an automated 'evolution' system that instructs the AI agent to search for, evaluate, and automatically install third-party skills from external sources like GitHub and ClawHub without manual oversight. While the Python code in maske_evolution.py is a benign logging utility, the instructions in SKILL.md create a high-risk environment for Remote Code Execution (RCE) by encouraging the agent to fetch and execute unverified remote artifacts during its 'daily evolution' cycle.
能力评估
Purpose & Capability
SKILL.md claims search across ClawHub/GitHub/SkillHub and automatic install/evolution flows, but the package declares no required binaries, no env vars, and no install spec. The included Python file does not implement network search or installer integrations — it only manages local records and tests and contains a hardcoded Windows workspace path (C:/Users/USER/.qclaw/workspace/evolution). Expectation mismatch: a skill that auto-discovers and installs other skills would normally list required CLIs, network access, or credentials; those are absent.
Instruction Scope
The runtime instructions direct the agent to perform broad actions: search multiple platforms, evaluate by VFM, and automatically install skills (examples show 'clawhub install' and 'skillhub install'), plus daily scheduled tasks that fetch and install code. These steps can cause the agent to download and execute arbitrary third‑party code. The SKILL.md also references writing logs (evolution/REFLECTION.md) and functions like install_or_create without limitations or safety checks. The instructions grant broad discretion to pull external artifacts without declaring safeguards.
Install Mechanism
There is no install spec (instruction-only install) so the skill itself doesn't drop installers during package install — this is lower static install risk. However, the SKILL.md explicitly instructs using external installers/CLIs (clawhub/skillhub) which are not declared as required binaries. That omission is an incoherence: the skill expects external tools but does not list them, and those tools would download/execute third‑party code.
Credentials
The skill requests no environment variables or credentials (good), but the code hardcodes a Windows user path and the instructions imply access to system state and possible network/private repos. Automatic installation of skills from GitHub or other hubs may require tokens for private content — none are declared. The lack of declared credentials combined with instructions to perform network installs is an incompleteness to be clarified.
Persistence & Privilege
always:false (default) and autonomous invocation is allowed (platform default). While that alone is not a showstopper, the skill's intended behavior (daily scheduled discovery and automatic installs) combined with autonomous invocation increases potential impact: if allowed to run unattended it could fetch and install external code repeatedly. The skill does not declare modifying other skills' configs explicitly, but the install flow implies it may.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install maske-evolution - 安装完成后,直接呼叫该 Skill 的名称或使用
/maske-evolution触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
首次发布:统一进化系统,自动化技能发现、评估、安装、进化
元数据
常见问题
马斯克进化系统 是什么?
统一进化系统,自动化技能发现、评估、安装、进化。当用户需要技能管理、系统进化、能力评估、技能搜索安装时使用此技能。支持ClawHub技能搜索、VFM评估、自动安装、每日进化流程。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 78 次。
如何安装 马斯克进化系统?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install maske-evolution」即可一键安装,无需额外配置。
马斯克进化系统 是免费的吗?
是的,马斯克进化系统 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
马斯克进化系统 支持哪些平台?
马斯克进化系统 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 马斯克进化系统?
由 skillforge-jojo(@skillforge-jojo)开发并维护,当前版本 v1.0.0。
推荐 Skills