Nginx Reverse Proxy

Configure nginx reverse proxy for domain binding. Trigger when user says "绑定域名" or "配置nginx" or "反向代理" to bind a domain to a specific IP:port.

This skill appears to do what it says: create an nginx virtual host file, test and reload nginx, and optionally run certbot to obtain TLS. Before using it, ensure the agent (or the person running the commands) has sudo/root access and that nginx and certbot are installed. Verify DNS for the domain points to your server. Review the generated config before reloading nginx to avoid accidental misconfiguration. Validate and sanitize the domain and target inputs (no newlines, no path traversal, domain is a valid hostname, target is a valid IP:port) to prevent malformed files or injection. Note the SKILL.md doesn't list required binaries (nginx, certbot, systemctl/sudo) — document or confirm those dependencies before installing. If you need stronger assurance, ask the author to add explicit prerequisites and input-validation steps (or run the commands manually yourself).

Type: OpenClaw Skill Name: nginx-reverse-proxy Version: 1.0.0 The skill automates Nginx reverse proxy configuration and SSL setup using certbot, which requires high-privilege sudo access and modification of system configuration files in /etc/nginx/. While these actions are consistent with the stated administrative purpose, the direct use of user-provided variables ({domain}, {target}) in shell commands within SKILL.md poses a risk of command injection if the agent fails to sanitize inputs. No evidence of intentional malice or data exfiltration was found.