Port Process

通过端口查找和管理系统进程。支持查找占用端口的进程、杀掉占用端口的进程、查看端口使用情况等操作。适用于 macOS 和 Linux 系统。使用场景：(1) "谁占用了 8080 端口"，(2) "杀掉占用 3000 端口的进程"，(3) "查看当前端口使用情况"。

This skill appears to do exactly what it says: find/list ports and optionally kill the owning processes. Before using: (1) run with --dry-run or --json to inspect targets, (2) prefer --safe to send SIGTERM before SIGKILL, (3) avoid running kill commands as root unless you intend to, and (4) if you allow autonomous agent invocation, be aware an agent could execute the destructive kill operations — consider requiring explicit user confirmation before any termination.

Type: OpenClaw Skill Name: port-process Version: 1.0.0 The skill bundle provides tools for managing system processes by port but contains shell injection vulnerabilities in `scripts/find_port.py` and `scripts/list_ports.py`. These scripts use `subprocess.run(shell=True)` with f-strings to execute system commands like `lsof` and `ps`, which could be exploited if the port input is not strictly validated as an integer. While the provided CLI entry points use `argparse` to enforce integer types, the underlying functions are inherently risky. The capability to terminate arbitrary system processes is high-risk, although it appears consistent with the skill's stated purpose.