← 返回 Skills 市场
Presale Service Bootstrap
作者
Dima Tsiomo
· GitHub ↗
· v0.1.0
571
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install presale-service-bootstrap
功能描述
Scaffold a new presale service foundation (docs/config/plans/readiness) before coding. Use when starting a new presale automation service, rebuilding project...
安全使用建议
This skill is instruction-only and appears coherent for bootstrapping documentation, configs, and readiness artifacts. Before running any recommended scripts: (1) confirm whether tools/new-presale-service.ps1 exists — the package you provided does not include it; (2) if the script is present, open and review its contents to ensure it does not perform network calls, credential access, or modify system-wide files; (3) run any untrusted script in an isolated environment (container or disposable VM) and ensure PowerShell is the intended runner; (4) if you plan to allow autonomous invocation, remember the agent could run the scaffold steps without per-run approval, so only enable that after you trust the script and instructions.
功能分析
Type: OpenClaw Skill
Name: presale-service-bootstrap
Version: 0.1.0
The skill bundle is classified as suspicious due to a direct instruction in `SKILL.md` to execute an external PowerShell script, `tools/new-presale-service.ps1`. The content of this script is not provided for review, making its execution opaque and a significant security risk. This constitutes a prompt injection vulnerability, as the AI agent is instructed to run an arbitrary command, which could lead to Remote Code Execution (RCE) if the PowerShell script were malicious. While the stated purpose is scaffolding, the lack of transparency for an executable component raises a critical security concern.
能力评估
Purpose & Capability
The skill's name and description describe scaffolding a presale service; the SKILL.md and the two reference docs strictly instruct creating docs, configs, plans, readiness checks, and repo structure. There are no unrelated environment variables, binaries, or install steps requested, so the declared purpose aligns with the actual requirements.
Instruction Scope
The runtime instructions stay within scaffolding/documentation generation scope (creating docs/, config/, plans, readiness checklist, etc.). They do, however, recommend running tools/new-presale-service.ps1 'from this skill pack' — but that file is not present in the package listing. If a scaffold script is later provided, inspect it before running because instruction-only skills rely on the agent executing commands you might not expect.
Install Mechanism
No install spec is present (lowest-risk form). Minor inconsistency: the SKILL.md recommends running a PowerShell script, but the skill does not declare any required binaries (e.g., PowerShell) nor include that script in the manifest. This is an implementation gap rather than an active install risk in the current package.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That matches its stated purpose of local repo scaffolding and documentation creation; nothing appears disproportionate.
Persistence & Privilege
always is false, and the skill is user-invocable only. There is no install or code that would persist or elevate privileges. Autonomous invocation is allowed by platform default but is not combined here with broad permissions or credentials.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install presale-service-bootstrap - 安装完成后，直接呼叫该 Skill 的名称或使用
/presale-service-bootstrap触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial reusable release
元数据
常见问题
Presale Service Bootstrap 是什么？
Scaffold a new presale service foundation (docs/config/plans/readiness) before coding. Use when starting a new presale automation service, rebuilding project... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 571 次。
如何安装 Presale Service Bootstrap？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install presale-service-bootstrap」即可一键安装，无需额外配置。
Presale Service Bootstrap 是免费的吗？
是的，Presale Service Bootstrap 完全免费（开源免费），可自由下载、安装和使用。
Presale Service Bootstrap 支持哪些平台？
Presale Service Bootstrap 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Presale Service Bootstrap？
由 Dima Tsiomo（@dtsiomo）开发并维护，当前版本 v0.1.0。
推荐 Skills