← 返回 Skills 市场
xueyetianya

Pid

作者 bytesagain4 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
128
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install pid
功能描述
PID controller tuning and simulation tool. Use when json pid tasks, csv pid tasks, checking pid status.
安全使用建议
This skill appears to be a simple local CLI that stores data under ~/.pid (or $PID_DIR if you set it). Before running: inspect scripts/script.sh yourself (it's a shell script that will be executed), back up any existing ~/.pid directory you care about, and consider running it in a sandbox if you want extra safety. Note: sed -i and other utilities behave slightly differently on some platforms (e.g., macOS), so test commands in your environment. No network access or secrets are requested by the skill.
功能分析
Type: OpenClaw Skill Name: pid Version: 1.0.0 The skill bundle is classified as suspicious due to a command injection vulnerability in the `cmd_config` function within `scripts/script.sh`. The script uses unsanitized variables (`key` and `val`) directly inside a `sed` substitution command, which could allow an attacker to perform unauthorized file writes or modifications if they can influence the configuration inputs. Additionally, there is a functional discrepancy: while `SKILL.md` describes the tool as a PID controller tuning and simulation suite, the provided code is merely a basic string logging and metadata management utility.
能力评估
Purpose & Capability
Name/description (PID tuning/simulation, JSON/CSV tasks) match the included shell script which stores entries, lists/searches/exports them, and manages a local config. No unrelated capabilities are requested.
Instruction Scope
SKILL.md directs the agent to run scripts/script.sh with specific commands. The script only reads/writes files under DATA_DIR (default ~/.pid) and uses standard shell utilities (grep, sed, tail, etc.). It does not access other system paths, credentials, or external endpoints.
Install Mechanism
There is no install spec (instruction-only skill) and the only executable code is a bundled shell script. No packages are downloaded or extracted from remote URLs. Risk is limited to executing the provided local script.
Credentials
No required environment variables or credentials are declared. The script accepts an optional PID_DIR env var to override the data directory, which is proportional to its purpose.
Persistence & Privilege
always:false and user-invocable:true. The skill does not request permanent platform-wide privileges, nor does it modify other skills or global agent settings. It will create and edit files only in its own data directory.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pid
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pid 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
publish v1.0.0
元数据
Slug pid
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Pid 是什么?

PID controller tuning and simulation tool. Use when json pid tasks, csv pid tasks, checking pid status. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 128 次。

如何安装 Pid?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pid」即可一键安装,无需额外配置。

Pid 是免费的吗?

是的,Pid 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Pid 支持哪些平台?

Pid 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pid?

由 bytesagain4(@xueyetianya)开发并维护,当前版本 v1.0.0。

💬 留言讨论