← 返回 Skills 市场
fengzie

Native Install

作者 fengzie · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ⚠ suspicious
129
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install mobazha-native-install
功能描述
Install the Mobazha native binary on Linux, macOS, or Windows. Use when the user wants to run a store without Docker.
安全使用建议
This skill is coherent for installing a native Mobazha binary, but it directs you to download-and-execute a remote installer (curl | bash) and to register a background service and auto-update launcher. Before proceeding: manually review the installer script (curl -sSL https://get.mobazha.org/install | less), verify the SHA-256 checksums against an authoritative source (GitHub Releases), confirm the HTTPS certificate/hostname for get.mobazha.org, consider installing in a sandbox/VM if you want to limit risk, and be aware macOS Gatekeeper may be bypassed by this method. No credentials are requested by the skill itself, so you don't need to provide API keys—just exercise the usual caution for remote installers and service auto-start behavior.
功能分析
Type: OpenClaw Skill Name: mobazha-native-install Version: 0.2.0 The skill relies on the high-risk 'curl | bash' pattern to download and execute a remote shell script from get.mobazha.org, which facilitates unverified remote code execution. It also provides instructions to establish system persistence via systemd/launchd and bypass macOS Gatekeeper security controls (xattr -d). While these actions are aligned with the stated purpose of installing the Mobazha software, the combination of remote script execution and system-level modifications via an AI agent presents a significant security risk.
能力评估
Purpose & Capability
Name and description (native binary installer for Mobazha) match the SKILL.md: the document describes platform detection, downloading binaries, placing them in ~/.local/bin, and registering a service. Nothing requested (no env vars, no unrelated binaries) is disproportionate to an installer.
Instruction Scope
The instructions focus on installation, service management, backups, and troubleshooting. They reference expected paths (e.g., ~/.local/bin, launchd, systemd) and do not instruct the agent to read unrelated files or harvest credentials. The one broad instruction is to run a network-fetched installer (curl | bash), which is within installer scope but important to treat as a risky action.
Install Mechanism
The skill is instruction-only (no install spec), but it tells users to run curl -sSL https://get.mobazha.org/install | bash. That pattern downloads and executes a remote script (get.mobazha.org). The SKILL.md also says binaries come from GitHub Releases and that checksums are verified — that mitigates some risk. Still, executing remote install scripts is a higher-risk mechanism and should be reviewed before running.
Credentials
No environment variables, credentials, or unrelated config paths are requested. All actions described (install directory, service registration, logs) are proportional to a local native installer.
Persistence & Privilege
The installer registers a background service and installs a launcher for auto-update/crash recovery, creating persistent presence on the host. This is expected for a server-like product but is a privilege that the user should consciously accept (service registration, auto-start, auto-update). The skill itself does not request always:true or other elevated platform-wide privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mobazha-native-install
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mobazha-native-install 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.2.0
Add security note for script review before execution
v0.1.0
Initial release
元数据
Slug mobazha-native-install
版本 0.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Native Install 是什么?

Install the Mobazha native binary on Linux, macOS, or Windows. Use when the user wants to run a store without Docker. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 129 次。

如何安装 Native Install?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mobazha-native-install」即可一键安装,无需额外配置。

Native Install 是免费的吗?

是的,Native Install 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Native Install 支持哪些平台?

Native Install 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Native Install?

由 fengzie(@fengzie)开发并维护,当前版本 v0.2.0。

💬 留言讨论