← 返回 Skills 市场
175
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install matrix-server-management
功能描述
Manage the Tuwunel Matrix Homeserver (register users, create rooms, manage room membership, upload files to media server). Use only for explicit standalone a...
安全使用建议
This skill appears to be a straightforward local Matrix admin recipe, but it references sensitive container environment variables (HICLAW_MATRIX_DOMAIN, HICLAW_ADMIN_USER, HICLAW_REGISTRATION_TOKEN, HICLAW_MANAGER_PASSWORD) that are not declared in the skill metadata. Before installing or using it: 1) Confirm these env vars exist in the runtime container and that you trust their source; 2) Treat the registration token and admin password as secrets — do not install the skill in an environment where those values are unknown or exposed to untrusted agents; 3) Preferably update the skill metadata to declare required.env (or ask the publisher to) so reviewers and deployers know what credentials are needed; 4) Run the skill only in an isolated environment or with explicit human invocation until you verify behavior; 5) If you did not obtain the skill from a trusted publisher (source unknown/homepage none), consider asking for provenance or a code-backed implementation (not just instructions) before granting it access to live admin credentials.
功能分析
Type: OpenClaw Skill
Name: matrix-server-management
Version: 1.0.0
The skill provides legitimate administrative functionality for managing a local Matrix homeserver (Tuwunel/conduwuit) via its API at 127.0.0.1:6167. It includes standard operations such as user registration, room management, and file uploads to the media server using pre-configured environment variables (e.g., HICLAW_REGISTRATION_TOKEN). No evidence of malicious intent, data exfiltration to external domains, or prompt injection was found in SKILL.md.
能力评估
Purpose & Capability
Name and description (manage a local Tuwunel/Matrix homeserver: register users, create rooms, send messages, upload media) line up with the concrete curl-based API calls in SKILL.md. Operations target the local Matrix HTTP API at 127.0.0.1:6167, which is coherent for this purpose.
Instruction Scope
SKILL.md instructs the agent to run curl against the local homeserver and to upload files from arbitrary paths — which is consistent with admin tasks — but it explicitly reads several environment variables from the container (HICLAW_MATRIX_DOMAIN, HICLAW_ADMIN_USER, HICLAW_REGISTRATION_TOKEN, HICLAW_MANAGER_PASSWORD). The skill metadata did not declare these as required, so the runtime instructions access secrets/config that are not represented in the declared surface.
Install Mechanism
Instruction-only skill with no install spec and no code files. This minimizes install-time risk (nothing is downloaded or written to disk by an installer).
Credentials
The specific env vars referenced are sensitive but relevant to Matrix admin operations (registration token, admin username/password, domain). The proportionality of the types of secrets is reasonable for the described task, but the package metadata failing to declare them (requires.env / primary credential) is an incoherence and a potential security/operational risk: the skill will attempt to use secrets that were neither documented in the registry nor presented to reviewers.
Persistence & Privilege
The skill is not always-on, does not request system-wide persistence, and does not modify other skills' configuration. It defaults to allowing autonomous invocation (disable-model-invocation: false) which is normal for skills; no additional privilege escalation is requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install matrix-server-management - 安装完成后，直接呼叫该 Skill 的名称或使用
/matrix-server-management触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of matrix-server-management skill.
- Provides admin tools for managing the Tuwunel Matrix homeserver: register users, create rooms, manage room membership, upload files via media API.
- Clearly documents required environment variables (pre-set in Manager container).
- Explains worker, admin, and room permissions, including power level overrides for each role.
- Documents how to send messages, including support for Matrix MSC3952 @mentions (critical for Worker functionality).
- Details media upload process and how to share files with the admin using Matrix file messages.
- Includes examples for key actions such as user registration, room creation, sending messages (with and without mentions), file upload, listing rooms, and fetching room messages.
- Emphasizes operational constraints: use only for explicit admin requests, as workers/projects trigger their own Matrix operations internally.
元数据
常见问题
Matrix Server Management 是什么？
Manage the Tuwunel Matrix Homeserver (register users, create rooms, manage room membership, upload files to media server). Use only for explicit standalone a... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 175 次。
如何安装 Matrix Server Management？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install matrix-server-management」即可一键安装，无需额外配置。
Matrix Server Management 是免费的吗？
是的，Matrix Server Management 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Matrix Server Management 支持哪些平台？
Matrix Server Management 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Matrix Server Management？
由 Monty（@montycn）开发并维护，当前版本 v1.0.0。
推荐 Skills