← 返回 Skills 市场
icenoodle

Clash Controller

作者 LostOmato · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
284
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install openclaw-clash-controller
功能描述
控制 Clash for Windows 代理:启动、关闭、查看状态、切换节点。触发词:Clash、代理、代理开关、开启代理、关闭代理、代理状态、切换节点。
安全使用建议
This skill primarily talks to the local Clash for Windows REST API and otherwise looks low-risk, but there are a few red flags you should act on before installing: - The code contains a hardcoded API secret. That means the skill will only work if your Clash external-controller secret exactly matches that value; otherwise it will fail. Consider editing the skill to read the secret from your Clash config or from an environment variable, or change your Clash secret to something you control. Never publish a secret you care about inside a skill bundle. - The SKILL.md claims the skill can start/stop the Clash process, but the shipped code does not implement process control. If you need process-level control, request or inspect an implementation that uses safe, explicit process APIs instead of relying on undocumented behavior. - Confirm External Controller is intentionally enabled on your machine and that you are comfortable granting the agent the ability to change proxy routing via that API — it can alter how your network traffic is routed (not exfiltrate data externally, but can change connectivity). If you are not comfortable editing code, or you don't want an agent able to toggle your system proxy, do not install. If you proceed, review and remove the hardcoded secret or replace it with a read-from-config/env implementation, test in a safe environment, and consider limiting autonomous invocation of the agent that will use this skill.
功能分析
Type: OpenClaw Skill Name: openclaw-clash-controller Version: 1.0.1 The skill is designed to control a local Clash for Windows proxy client via its RESTful API on 127.0.0.1:61222. The logic in `skill.js` is limited to toggling proxy states (GLOBAL/DIRECT), switching nodes, and querying local status. While it contains a hardcoded authentication secret ('ff62c2da...'), this is used solely for local communication with the proxy service and does not facilitate data exfiltration or unauthorized remote access.
能力评估
Purpose & Capability
Name/description (Clash controller) align with the code and SKILL.md: both target the Clash for Windows External Controller API on localhost. However, the SKILL.md claims '进程控制 - 启动/关闭 Clash for Windows 进程' while the provided code only manipulates proxy settings via the REST API (no process spawn/kill). This is an incoherence between advertised capability and implementation.
Instruction Scope
SKILL.md instructs enabling External Controller and points to a local config path and secret — that's appropriate. The code, however, hardcodes a specific secret value and always targets 127.0.0.1:61222; it does not read the documented config file, environment variables, or implement process start/stop. The skill's runtime instructions give broader expectations than the code actually performs.
Install Mechanism
No install spec (instruction-only) and the included code uses only Node's core http module. Nothing is downloaded from external URLs and no third-party packages are installed. Low install risk.
Credentials
The skill declares no required environment variables or credentials, which fits. But the code embeds a hardcoded 'secret' UUID in cleartext. That is a credential baked into the skill bundle (not exfiltrated), which is inconsistent with SKILL.md examples that show a user-configurable secret. The hardcoded secret may simply make the skill non-functional unless the user's Clash config uses the same secret.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings directly, and only makes local HTTP calls to the loopback address. Its privilege footprint is limited to interacting with the local Clash REST API.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install openclaw-clash-controller
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /openclaw-clash-controller 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Updated skill documentation with more detailed configuration, usage instructions, and expanded trigger phrases in SKILL.md. - Improved feature descriptions to emphasize API usage, node switching, and process control. - Removed test files (test-api.js, test.js) from the codebase.
v1.0.0
Initial release of openclaw-clash-controller. - Supports starting and stopping Clash for Windows. - Allows querying Clash running status and retrieving version information. - Enables toggling the system proxy setting. - Requires configuration of the Clash installation path and API port.
元数据
Slug openclaw-clash-controller
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Clash Controller 是什么?

控制 Clash for Windows 代理:启动、关闭、查看状态、切换节点。触发词:Clash、代理、代理开关、开启代理、关闭代理、代理状态、切换节点。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 284 次。

如何安装 Clash Controller?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-clash-controller」即可一键安装,无需额外配置。

Clash Controller 是免费的吗?

是的,Clash Controller 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Clash Controller 支持哪些平台?

Clash Controller 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clash Controller?

由 LostOmato(@icenoodle)开发并维护,当前版本 v1.0.1。

💬 留言讨论