← 返回 Skills 市场
Nerve Bridge Skill
作者
88901111hz-lang
· GitHub ↗
· vv1.0.0
651
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install nerve-bridge-skill
功能描述
Bi-directional control of Trae via macOS AppleScript with built-in feedback mechanism. Use when needing to execute code/commands in Trae IDE and wait for com...
安全使用建议
This skill is coherent with its purpose, but it automates an editor/IDE to run whatever payload you send. Before installing or using it: (1) only send instructions you trust — the IDE will execute them; (2) avoid including secrets in the payload or clipboard; (3) confirm you are comfortable granting Accessibility permissions to enable the automation; (4) inspect the script (included) and consider running in a restricted environment if you are unsure. If you need stronger guarantees, avoid pasting sensitive code via the clipboard or add validation/sandboxing on the Trae side.
功能分析
Type: OpenClaw Skill
Name: nerve-bridge-skill
Version: v1.0.0
The skill is classified as suspicious due to a significant code injection vulnerability in `scripts/nerve_bridge.py`. The script directly concatenates unsanitized user input (`sys.argv[1]`) with a Python hook, then copies this combined payload to the clipboard and uses AppleScript to paste and execute it within the 'Trae' IDE. This allows for arbitrary code execution on the host system if a malicious instruction is provided, but the skill itself does not contain explicit malicious payloads or instructions for harmful behavior.
能力评估
Purpose & Capability
The name/description match the actual behavior: it automates Trae via AppleScript, uses the system clipboard, and waits for a feedback file. Required binaries (python3, osascript) and macOS Accessibility permission are expected for this purpose.
Instruction Scope
Instructions and the Python script limit activity to copying payload to the clipboard, activating Trae, simulating keystrokes, and waiting for ~/.openclaw/workspace/trae_feedback.json. This is coherent, but note that the skill relies on Trae executing the injected payload (including arbitrary code you provide). Also, using pbcopy (clipboard) can leak clipboard contents if the payload includes sensitive data.
Install Mechanism
No install spec — instruction-only with a single helper script. Nothing is downloaded or written to install locations beyond the script itself being included in the skill bundle.
Credentials
No environment variables, credentials, or unrelated config paths are requested. The only filesystem interaction is the feedback file under the user's home directory, which is consistent with the stated feedback mechanism.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and only writes/reads its own feedback file path. It requires macOS Accessibility permissions for UI automation, which is expected for AppleScript-driven automation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nerve-bridge-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/nerve-bridge-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
vv1.0.0
Bi-directional control of Trae with feedback mechanism via AppleScript
元数据
常见问题
Nerve Bridge Skill 是什么？
Bi-directional control of Trae via macOS AppleScript with built-in feedback mechanism. Use when needing to execute code/commands in Trae IDE and wait for com... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 651 次。
如何安装 Nerve Bridge Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nerve-bridge-skill」即可一键安装，无需额外配置。
Nerve Bridge Skill 是免费的吗？
是的，Nerve Bridge Skill 完全免费（开源免费），可自由下载、安装和使用。
Nerve Bridge Skill 支持哪些平台？
Nerve Bridge Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nerve Bridge Skill？
由 88901111hz-lang（@88901111hz-lang）开发并维护，当前版本 vv1.0.0。
推荐 Skills