← 返回 Skills 市场
PhiProto CLI
作者
chengongpp
· GitHub ↗
· v1.0.3
· MIT-0
89
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install phiproto
功能描述
Use when working with .phiproto files, PhiProto messages, or converting between .phiproto and CSV with the bundled phicli binary. Trigger on requests to insp...
安全使用建议
This skill is coherent with its stated purpose but has two practical security concerns you should consider before installing or running it: 1) getphi.sh downloads an executable from a GitHub release and places it in ~/.local/bin without verifying a checksum or signature; 2) the script does not set the executable bit (chmod), so it may not be runnable as-is. If you want to use this skill safely: verify the GitHub repository and the release tag manually, prefer downloading a release with an accompanying hash/signature and verify it, run the binary in a sandbox or VM first, or ask the skill author to include a signed checksum or source code. If you cannot verify the binary, avoid executing it on sensitive systems.
能力评估
Purpose & Capability
The skill claims to provide a 'bundled phicli binary' for working with .phiproto files and its instructions/auxiliary script do focus on decoding/encoding .phiproto as described. However the binary is not actually bundled in the package — instead getphi.sh downloads it from a GitHub release. This is a minor inconsistency but does not on its own make the skill unusable.
Instruction Scope
SKILL.md tells the agent to fetch phicli from github.com/chengongpp/phicli and then use it locally. The runtime instructions and helper script will download a remote executable into $HOME/.local/bin. The instructions do not request unrelated files/credentials, but they do direct network download and installation of an executable which expands the skill's scope beyond pure local file inspection. There is no integrity or signature check and the README claims the tool 'runs local-only' (a claim you cannot verify from this package).
Install Mechanism
There is no formal install spec in registry; instead the included getphi.sh uses wget to download a binary from a GitHub Releases URL (github.com/chengongpp/phiproto/releases/download/0.0.2/phicli) into $HOME/.local/bin. Downloading from GitHub releases is common, but the script does not verify checksums or signatures and does not set the executable bit (no chmod), which risks both usability and security. No archive extraction is done and the host is a known release host (GitHub), so risk is moderate but notable due to missing integrity checks.
Credentials
The skill does not request environment variables, credentials, or config paths. The only implicit use is $HOME as the target install location. There are no unrelated secrets or broad credential requests.
Persistence & Privilege
The skill writes a file into $HOME/.local/bin which is a per-user persistent location and may affect future PATH behavior. always:false (no forced inclusion) and the skill does not modify other skills or system-wide settings. Writing to the user's bin directory is expected for a user-scoped tool but is a persistent change the user should be aware of.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install phiproto - 安装完成后，直接呼叫该 Skill 的名称或使用
/phiproto触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
- Updated safety notes to clarify that users must download the phicli binary from github.com/chengongpp/phicli, the only trusted source.
- No changes to commands or workflow; skill operation remains the same.
v1.0.2
- Updated safety notes to clarify that the tool is now local-only and does not fetch remote content.
- Removed instructions and examples related to PHI_ALLOWLIST and remote dependencies.
- Simplified response guidance to reflect the local-only operation.
- No changes to code or functionality; documentation only.
v1.0.0
Initial release of the phiproto skill.
- Supports decoding, encoding, and inspecting `.phiproto` files via the bundled `phicli` binary (Linux x86_64 only).
- Enables conversion between `.phiproto` and CSV formats.
- Responds to user requests to open, inspect, decode, encode, or explain `.phiproto` content.
- Provides command usage examples and safety recommendations, including allowlist instructions for remote content.
- Ensures repeatable workflows by recommending explicit output files.
元数据
常见问题
PhiProto CLI 是什么？
Use when working with .phiproto files, PhiProto messages, or converting between .phiproto and CSV with the bundled phicli binary. Trigger on requests to insp... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 89 次。
如何安装 PhiProto CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install phiproto」即可一键安装，无需额外配置。
PhiProto CLI 是免费的吗？
是的，PhiProto CLI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
PhiProto CLI 支持哪些平台？
PhiProto CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 PhiProto CLI？
由 chengongpp（@chengongpp）开发并维护，当前版本 v1.0.3。
推荐 Skills