← 返回 Skills 市场
138
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mock-build
功能描述
Manage RPM package builds securely and reproducibly using Mock to create clean chroot environments with configurable presets and plugins.
安全使用建议
This skill appears to be what it says: a guide for using Mock to build RPMs. Before following the instructions, consider: do not add NOPASSWD sudo entries unless you understand the risk—prefer adding the user to the mock group and using sudo with explicit, audited commands; avoid disabling GPG checks (gpgcheck=0) unless you control the repository and accept the risk; be careful with the 'sign' plugin because signing requires private keys—ensure keys remain on secure hardware or in a protected agent and are not exposed to build chroots; review any repository URLs and local paths you add; run mock actions in an isolated build host or VM to limit blast radius. If you need a higher-assurance review, provide the full (non-truncated) custom.cfg and any repository URLs or signing workflows the skill will use so those parts can be inspected in detail.
功能分析
Type: OpenClaw Skill
Name: mock-build
Version: 1.0.0
The skill bundle provides comprehensive documentation and instructions for managing RPM build environments using the legitimate 'mock' tool. It includes standard setup procedures, such as group management and sudoers configuration for the mock binary, which are typical for build automation. All provided commands, configuration examples (e.g., custom.cfg), and repository URLs (Fedora/EPEL) are consistent with the stated purpose of RPM package building and show no signs of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The name/description match the content: SKILL.md contains Mock installation steps, config locations, example presets, and commands for building, cleaning, and managing chroots. There are no unrelated binaries, environment variables, or credentials requested.
Instruction Scope
Instructions remain within the build domain (mock commands, config paths like /etc/mock, /var/lib/mock, ~/.config/mock.cfg). However, the docs recommend system changes with security impact — adding a user to the mock group, configuring sudoers with NOPASSWD for /usr/bin/mock, using systemd-run, and a sample repo config that sets gpgcheck=0. These are relevant to building but have clear security trade-offs that the skill does not fully warn about.
Install Mechanism
This is an instruction-only skill (no install spec). Nothing is downloaded or written by the skill bundle itself, which reduces supply-chain risk.
Credentials
The skill requests no environment variables or external credentials, which is appropriate. Operational steps do require elevated privileges (usermod, visudo edits, systemd-run), and the examples include signing plugins (which in practice require access to signing keys) and disabling gpg checks in repo config. Those privilege/secrets implications are relevant but not declared or explained in the skill.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request permanent presence or claim to modify other skills or global agent settings. Autonomous model invocation is allowed (platform default) and not a separate concern here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mock-build - 安装完成后，直接呼叫该 Skill 的名称或使用
/mock-build触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - Mock build environment support
元数据
常见问题
mock 是什么？
Manage RPM package builds securely and reproducibly using Mock to create clean chroot environments with configurable presets and plugins. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 138 次。
如何安装 mock？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mock-build」即可一键安装，无需额外配置。
mock 是免费的吗？
是的，mock 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
mock 支持哪些平台？
mock 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 mock？
由 wei dong（@weidongkl）开发并维护，当前版本 v1.0.0。
推荐 Skills