← 返回 Skills 市场
fengzie

Standalone Setup

作者 fengzie · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ⚠ suspicious
126
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install mobazha-standalone-setup
功能描述
Deploy a self-hosted Mobazha store on any Linux VPS using Docker. Use when the user wants to set up a standalone store on a server.
安全使用建议
This skill appears coherent for installing a self-hosted Mobazha instance, but take these precautions before using it: (1) Do not hand over SSH credentials to anyone you don't fully trust — prefer to run the installer yourself over an SSH session you control. (2) Inspect the remote installer before executing: open https://get.mobazha.org/standalone in a browser or run curl -sSL https://get.mobazha.org/standalone | less to review the script. (3) Be aware the installer will generate API keys and contact app.mobazha.org by default — review /opt/mobazha/.env after install and change secrets as needed. (4) Consider running first on a disposable/staging VPS to observe outgoing connections and behavior (or run in an isolated network). (5) If you require greater assurance, ask the skill author for a reproducible, auditable release (e.g., GitHub release tarball or repository) instead of a single get.* script. (6) If you supply credentials to the agent, confirm the agent's stated policy that it will not persist or transmit them, but treat that as an honor system — prefer manual execution if you need guarantees.
功能分析
Type: OpenClaw Skill Name: mobazha-standalone-setup Version: 0.2.0 The skill facilitates the deployment of software by executing a remote shell script with root privileges via a 'curl | bash' pattern (https://get.mobazha.org/standalone) on a user-provided VPS. While SKILL.md includes security warnings and guidelines for safe credential handling, the automated execution of unverified remote code and the creation of systemd persistence for auto-updates represent significant security risks inherent to the deployment method.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The name/description (deploy a Mobazha store on a Linux VPS using Docker) matches the instructions: SSH to the VPS, run an installer script, install Docker, place files under /opt/mobazha, and create management tooling. Required credentials (SSH access) are appropriate and the skill does not request unrelated secrets.
Instruction Scope
Instructions explicitly tell the agent to SSH to a user-provided VPS and run a remote installer via curl | sudo bash. They also describe generating an API key and configuring auto-updates/systemd. The instructions do not ask the agent to read unrelated local files or to exfiltrate credentials, but they do direct execution of a remote script and expect network calls to external services (e.g., default SaaS API URL), which is beyond the agent's local scope and warrants user review.
Install Mechanism
This is instruction-only (no install spec), but the core install step pipes a script from https://get.mobazha.org into sudo bash. While common for installers, this is a high-risk pattern because arbitrary code is downloaded and executed. The URL is project-specific (not a general package registry); the skill itself warns to inspect the script first. Users should verify the script's contents and TLS identity before running.
Credentials
The skill only requests SSH credentials (IP + password/key), which is proportionate to remote VPS administration. However the installer references an external SaaS endpoint (default https://app.mobazha.org) and will generate/store API keys in /opt/mobazha/.env. That external communication and generated credentials are part of the product behavior and should be considered when trusting the service.
Persistence & Privilege
The skill does not request elevated platform privileges (always:false) for the agent itself. The installer will create persistent artifacts on the target VPS (systemd timer, /usr/local/bin/mobazha-ctl, docker services, /opt/mobazha), which is expected for a host-level deployment but means the installed software will persist and may run background updates and network calls.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mobazha-standalone-setup
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mobazha-standalone-setup 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.2.0
Add credential declarations; require explicit user consent before SSH; strengthen credential safety
v0.1.0
Initial release
元数据
Slug mobazha-standalone-setup
版本 0.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Standalone Setup 是什么?

Deploy a self-hosted Mobazha store on any Linux VPS using Docker. Use when the user wants to set up a standalone store on a server. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 126 次。

如何安装 Standalone Setup?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mobazha-standalone-setup」即可一键安装,无需额外配置。

Standalone Setup 是免费的吗?

是的,Standalone Setup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Standalone Setup 支持哪些平台?

Standalone Setup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Standalone Setup?

由 fengzie(@fengzie)开发并维护,当前版本 v0.2.0。

💬 留言讨论