← 返回 Skills 市场
phibuc87

EDI MSP Toolkit

作者 phibuc87 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
694
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install msp-toolkit
功能描述
Provides IT MSP tools for Azure/M365 audits, NPU monitoring, and firewall, SSH, and system health checks.
安全使用建议
This skill is inconsistent: it advertises scripts but contains none, and tells the agent to install an npm package and publish a hard-coded local path (/home/cc/...). That could cause the agent to read and upload files from your machine or install and run third-party code. Before installing, ask the publisher for the actual script files and a trustworthy source URL, verify what 'clawhub publish' does and where it sends data, avoid running npm installs from untrusted packages in your environment, and never allow publishing of paths that point into your home directory unless you fully trust the skill author. If you must test, run it in a tightly sandboxed environment with no access to sensitive files or credentials.
功能分析
Type: OpenClaw Skill Name: msp-toolkit Version: 1.0.0 The `SKILL.md` file contains a 'Setup' instruction `clawhub publish /home/cc/.openclaw/workspace/skills/msp-toolkit`. This command instructs the AI agent to publish the skill itself. This is a form of prompt injection, as it directs the agent to perform an action (self-publication) that typically requires explicit user consent and could bypass review processes, representing an unauthorized attempt at distribution or self-propagation.
能力评估
Purpose & Capability
The description promises scripts (Azure/M365 audits, NPU monitoring, firewall/SSH healthchecks) but the package contains only SKILL.md and no actual scripts. Claiming specific executable components (msp-dashboard.py, healthcheck, nuc-reset.sh) without shipping them is incoherent.
Instruction Scope
SKILL.md directs the agent to run 'npm install clawhub' and 'clawhub publish /home/cc/.openclaw/workspace/skills/msp-toolkit'. That publish command references a hard-coded local path (the user's home) which would cause the agent to read and transmit local files; the instructions are vague and grant broad discretion to install and publish content.
Install Mechanism
There is no declared install spec in the manifest, but the instructions ask to install an npm package. Installing third-party packages at runtime can execute arbitrary code; the skill provides no provenance or justification for installing 'clawhub'.
Credentials
The skill declares no required env vars yet instructs operations that implicitly access local filesystem paths and potentially a publishing service. Requesting no credentials while telling the agent to publish local content is disproportionate and opaque.
Persistence & Privilege
The skill is not set to always:true and does not request elevated platform privileges. However, the publish step could modify a remote registry or upload local files; that behavioral effect is not reflected in the manifest and is unexpected for a simple instruction-only skill.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install msp-toolkit
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /msp-toolkit 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial MSP tools for IT workflows: audits, NPU monitoring, health checks.
元数据
Slug msp-toolkit
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

EDI MSP Toolkit 是什么?

Provides IT MSP tools for Azure/M365 audits, NPU monitoring, and firewall, SSH, and system health checks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 694 次。

如何安装 EDI MSP Toolkit?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install msp-toolkit」即可一键安装,无需额外配置。

EDI MSP Toolkit 是免费的吗?

是的,EDI MSP Toolkit 完全免费(开源免费),可自由下载、安装和使用。

EDI MSP Toolkit 支持哪些平台?

EDI MSP Toolkit 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 EDI MSP Toolkit?

由 phibuc87(@phibuc87)开发并维护,当前版本 v1.0.0。

💬 留言讨论