← 返回 Skills 市场
ckchzh

Modbus

作者 BytesAgain2 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
146
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install modbus
功能描述
Modbus communication protocol tool. Use when json modbus tasks, csv modbus tasks, checking modbus status.
安全使用建议
This skill appears low-risk and does what it says: it runs a local shell script that stores data in a configurable directory (default ~/.modbus). Before installing, review that you are comfortable with the agent running the included script and writing files to that directory. If you set MODBUS_DIR, do not point it to sensitive system locations (e.g., /, /etc, other apps' config dirs) because the script will create and modify files under whatever path is provided. Note there are no network calls or credential requests in the bundled script. If you need additional assurance, compare the included files to the upstream repo (https://github.com/bytesagain/ai-skills) and run the script manually in a controlled environment first.
功能分析
Type: OpenClaw Skill Name: modbus Version: 1.0.0 The 'modbus' skill contains significant input sanitization vulnerabilities in 'scripts/script.sh', most notably a potential remote code execution (RCE) risk in the 'cmd_config' function where unvalidated input is passed directly into a 'sed -i' command. Additionally, the 'cmd_add' function is vulnerable to JSON injection when writing to the local data store. The tool is also misleadingly described in 'SKILL.md' as a Modbus communication protocol tool, despite lacking any actual industrial protocol implementation and functioning only as a basic local text logger.
能力评估
Purpose & Capability
Name/description match the implementation: the script implements status/add/list/search/remove/export/stats/config functionality for Modbus-related entries stored under a data directory. No unexpected services or credentials are requested.
Instruction Scope
SKILL.md instructs running the bundled shell script with discrete commands; the script only reads/writes files under DATA_DIR (default ~/.modbus) and does not reference other system paths, secrets, or network endpoints.
Install Mechanism
There is no install spec and the shipped script is included in the skill bundle; nothing is downloaded or installed from external URLs, so install risk is low.
Credentials
No required environment variables or credentials are declared. The script optionally respects MODBUS_DIR (documented), which is appropriate for configuring the data directory.
Persistence & Privilege
Skill is not forced-always, uses normal agent invocation, and only creates/updates files under its own data directory; it does not modify other skills or system-wide agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install modbus
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /modbus 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
publish v1.0.0
元数据
Slug modbus
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Modbus 是什么?

Modbus communication protocol tool. Use when json modbus tasks, csv modbus tasks, checking modbus status. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 146 次。

如何安装 Modbus?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install modbus」即可一键安装,无需额外配置。

Modbus 是免费的吗?

是的,Modbus 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Modbus 支持哪些平台?

Modbus 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Modbus?

由 BytesAgain2(@ckchzh)开发并维护,当前版本 v1.0.0。

💬 留言讨论