安装 ob1 openblocklabs 完成验证步骤

Install and authenticate OB1 (OpenBlock One), a multi-model terminal coding agent. Use when asked to install OB1, set up ob1, or when ob1 authentication/logi...

This skill appears to do what it says, but proceed with caution: 1) The installer command pipes a remote script to bash — inspect the script before running (download it first and review its contents or verify a checksum) or ask the vendor for a package you can audit. 2) Run the installer in a controlled environment (non-root user, container, or VM) if you want to limit risk. 3) The device-code auth will save tokens under ~/.ob1; keep that directory secure and avoid sharing tokens. 4) When the skill asks you to "send the code via chat," only transmit the one-time device code to the intended human; do not paste it to public channels or unknown endpoints. 5) If you need higher assurance, request an official install method (package repo, signed release) or vendor-provided verification steps before installing.

Type: OpenClaw Skill Name: ob1-install Version: 1.0.0 The skill utilizes a high-risk 'curl | bash' pattern in SKILL.md to install software from a remote endpoint (https://dashboard.openblocklabs.com/install). While common for developer tools, this method executes unverified remote code and bypasses standard security inspections. Additionally, the skill manages authentication tokens and configuration within the user's home directory (~/.ob1/), which could be leveraged for unauthorized access if the remote binary is compromised.