← 返回 Skills 市场
PaleBlueDot CLI
作者
derekdong-star
· GitHub ↗
· v1.0.1
· MIT-0
113
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install pbd-cli
功能描述
Command-line tool for PaleBlueDot AI platform supporting login, API token management, usage and balance queries, and browsing available AI models.
安全使用建议
This skill appears to do what it claims, but exercise caution before installing. Do not blindly run the suggested curl | bash installer: inspect the install.sh contents and verify the GitHub repository and release artefacts (checksums/signatures) yourself. Prefer downloading an audited release or using a package manager if available. Be aware the CLI stores session cookies/API tokens locally (check the config path and file permissions). If you must use manual login, avoid pasting sensitive cookies into untrusted environments. If you want lower risk, ask the vendor for signed releases or a package that can be inspected before execution, or run the install inside a disposable VM/container.
功能分析
Type: OpenClaw Skill
Name: pbd-cli
Version: 1.0.1
The skill bundle describes a CLI tool for managing AI platform credentials, including session cookies and API tokens. A significant security concern is the 'One-click Install' instruction in SKILL.md, which directs the agent or user to execute a remote script via 'curl | bash' from a GitHub repository (github.com/PaleBlueDot-AI-Open/pbd-cli). This pattern is a high-risk behavior that facilitates potential supply chain attacks and remote code execution. While the tool's functionality is consistent with its stated purpose, the combination of sensitive credential handling and unverified remote script execution warrants a suspicious classification.
能力评估
Purpose & Capability
The SKILL.md describes a CLI for authentication, token management, usage queries, and model browsing — that matches the stated purpose. However, the SKILL.md metadata lists a required binary (pbd-cli) while the registry metadata reported no required binaries; this mismatch suggests the registry record and runtime instructions are not fully synchronized.
Instruction Scope
The instructions stay within the CLI's domain: they describe browser-based OAuth callback, a local HTTP server for the callback, manual cookie entry, token and usage commands, and local config storage. The skill does not instruct reading unrelated system files or grabbing arbitrary environment variables. The manual-login flow does ask the user to paste a session cookie (user-supplied data).
Install Mechanism
Although there is no formal install spec in the registry, the SKILL.md includes a One-click Install that pipes a script from raw.githubusercontent.com into bash (curl ... | bash) and installs to /usr/local/bin. Download-and-execute from a remote script is high-risk: while GitHub raw is a common host, piping to bash executes remote code without a local inspection step and can modify system paths. The SKILL.md does not show the install script contents or provide checksums or signed releases.
Credentials
The skill declares no required environment variables or primary credential, which aligns with a client CLI that performs interactive login. It will, however, store session tokens/config locally and manages API tokens — users should expect secrets (session cookies/API keys) to be written to local config. No unrelated credentials are requested.
Persistence & Privilege
always:false and normal autonomous invocation are set (no elevated platform privilege). The install instructions propose placing a binary in /usr/local/bin, which is a persistent, system-wide location and may require elevated permissions; the skill does not ask to modify other skills or system configs beyond installing its binary.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pbd-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/pbd-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added installation instructions with a one-click script for Linux/macOS.
- No changes to commands or functionality; documentation update only.
v1.0.0
Initial release of pbd-cli: Command-line tool for the PaleBlueDot AI Platform.
- Supports authentication via browser-based OAuth or manual session cookie.
- API token management: create, view, delete, and retrieve token keys.
- Query account usage, balance, and subscription status.
- List and browse available AI models for the account.
- Includes detailed error handling, help commands, and secure local config storage.
元数据
常见问题
PaleBlueDot CLI 是什么？
Command-line tool for PaleBlueDot AI platform supporting login, API token management, usage and balance queries, and browsing available AI models. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 113 次。
如何安装 PaleBlueDot CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pbd-cli」即可一键安装，无需额外配置。
PaleBlueDot CLI 是免费的吗？
是的，PaleBlueDot CLI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
PaleBlueDot CLI 支持哪些平台？
PaleBlueDot CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 PaleBlueDot CLI？
由 derekdong-star（@derekdong-star）开发并维护，当前版本 v1.0.1。
推荐 Skills