← 返回 Skills 市场
145
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install normieclaw-home-fix-it
功能描述
Before you call a handyman at $150/hour just to look at your sink, snap a photo. Home Fix-It Pro diagnoses the problem, rates the difficulty, gives you an ex...
安全使用建议
What to check before installing:
- The core skill appears coherent and runs locally, but inspect the SETUP-PROMPT and confirm your agent runtime will actually perform strict path canonicalization and enforce chmod/chown as described (to prevent directory escape via symlinks).
- The package includes a dashboard kit that requires Supabase/NextAuth and environment variables — only provide DB or auth credentials if you intentionally enable the dashboard, and review its deployment code and access controls first.
- Verify the agent truly keeps photos local (run a test with non-sensitive images and monitor network activity). The README/SECURITY claim of "100% Local Processing" conflicts with bundled dashboard instructions that assume external services.
- If you enable integrations (DocuScan, dashboard), follow least-privilege principles: use per-service accounts, private storage buckets, and rotate keys; enable row-level security as recommended.
- Back up any existing workspace data before letting the skill create files, and run the setup in a controlled environment (not on a sensitive production host) until you confirm behavior.
If you want, I can produce a short checklist of exact runtime permissions and filesystem commands to review with your platform operator.
功能分析
Type: OpenClaw Skill
Name: normieclaw-home-fix-it
Version: 1.0.3
The 'Home Fix-It' skill is a well-structured and security-conscious home maintenance assistant. It includes explicit defensive instructions for the AI agent to prevent path traversal and unauthorized file access by requiring path canonicalization and strict file permissions (chmod 700/600) in SETUP-PROMPT.md. Furthermore, SKILL.md and safety-rules.md implement a robust safety classification system (Red/Yellow/Green zones) and a clear instruction hierarchy designed to mitigate prompt injection and ensure physical safety during home repairs.
能力评估
Purpose & Capability
The name, README, and SKILL.md all describe a local, vision-capable home-repair assistant that stores data under a workspace 'home/' directory — that is coherent with the declared lack of required binaries and environment variables. However, the included dashboard-kit and manifest describe a Supabase-backed dashboard, authentication requirements, and environment variables for DB/auth keys. That suggests an optional cloud-backed component not reflected in the top-level claims (README/SECURITY state '100% Local Processing'). This is likely an optional feature but is an inconsistency the user should be aware of.
Instruction Scope
The SKILL.md and SETUP-PROMPT are explicit and narrowly scoped: they tell the agent to canonicalize the workspace root, create a 'home/' directory and specific files, and re-canonicalize before each read/write. Those filesystem actions are reasonable for local persistence and within the stated purpose. The skill also includes robust prompt-injection defenses and a clear safety classification. Note: the SETUP-PROMPT instructs the agent to execute path resolution and filesystem commands — the actual agent runtime must implement those safely (canonicalization checks, no symlink escape), so verify the runtime honors those constraints.
Install Mechanism
Instruction-only skill with no install spec or downloaded code. This minimizes supply-chain risk since nothing is written to disk by an installer outside the explicit SETUP-PROMPT filesystem actions.
Credentials
The skill declares no required environment variables or credentials, which matches the local-processing claim. However, the dashboard-kit and DASHBOARD-SPEC explicitly mention Supabase, NextAuth, private storage buckets, and environment variables for keys/URLs. If you enable the dashboard or the DocuScan/manual-retrieval integration, you'll need to supply external credentials, which contradicts the packaging's 'no external transmission' messaging. Treat those dashboard components as optional plugins that require additional secrets and careful review.
Persistence & Privilege
The skill is not always-enabled and can be invoked by the user. Its persistent footprint is limited to creating/maintaining a 'home/' directory within the user's workspace (as defined by SETUP-PROMPT). That behavior is proportional for a maintenance-tracking tool, provided the runtime enforces the described canonicalization and permissions (chmod 700/600).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install normieclaw-home-fix-it - 安装完成后，直接呼叫该 Skill 的名称或使用
/normieclaw-home-fix-it触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
v1.0.3: Security fixes: confined scripts to skill directory, removed filesystem traversal from setup
v1.0.2
v1.0.2: MIT license, cleaned descriptions, removed cross-sell
v1.0.0
Initial publish from NormieClaw.ai — Free OpenClaw skills for everyone.
元数据
常见问题
Home Fix-It 是什么？
Before you call a handyman at $150/hour just to look at your sink, snap a photo. Home Fix-It Pro diagnoses the problem, rates the difficulty, gives you an ex... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 145 次。
如何安装 Home Fix-It？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install normieclaw-home-fix-it」即可一键安装，无需额外配置。
Home Fix-It 是免费的吗？
是的，Home Fix-It 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Home Fix-It 支持哪些平台？
Home Fix-It 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Home Fix-It？
由 Nollio（@nollio）开发并维护，当前版本 v1.0.3。
推荐 Skills