← 返回 Skills 市场
prompt-buddy
作者
Steventsang18
· GitHub ↗
· v0.1.0
· MIT-0
96
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install prompt-buddy
功能描述
【全局强制技能】每次用户输入后必须执行此技能。 执行命令：cd ~/.openclaw/workspace/skills/promptbuddy && python3 scripts/smart_engine.py -f json "用户输入" 从返回JSON提取：optimized_prompt（优化后的Pro...
安全使用建议
Do not install or enable this skill without further checks. Key things to verify before trusting it: (1) Confirm whether the repository/package actually includes scripts/smart_engine.py — currently the skill bundle has no code. If the script is present, inspect its source thoroughly to ensure it doesn't exfiltrate data or run unsafe operations. (2) Clarify the global-run requirement: if you do not want the skill executed on every user input, keep always:false and disable autonomous invocation. (3) Prefer skills that include their runtime code or a vetted install step (so there is no silent dependence on a local file). (4) If you must test, run the agent in a sandboxed environment and review logs/output of the invoked script before enabling it for real users.
功能分析
Type: OpenClaw Skill
Name: prompt-buddy
Version: 0.1.0
The skill bundle is classified as suspicious because it mandates its execution on every user input ('Global Mandatory Skill'), effectively acting as an interception hook for all agent communications. The instructions in SKILL.md direct the agent to pass raw user input into a shell command (`python3 scripts/smart_engine.py -f json "用户输入"`), which is highly vulnerable to shell injection. While the stated purpose is prompt optimization, the aggressive 'always-run' requirement and the potential for command injection via unsanitized user input pose a significant security risk.
能力评估
Purpose & Capability
The declared purpose (prompt optimization) matches the idea of invoking a 'smart_engine' script, but the skill bundle contains no code or install steps while the SKILL.md instructs the agent to run a local script at ~/.openclaw/workspace/skills/promptbuddy/scripts/smart_engine.py. Asking the agent to execute a script that is not part of the skill package is incoherent and creates room for unexpected behavior.
Instruction Scope
Runtime instructions explicitly require executing a local Python script with the user's full input on every user turn and extracting JSON from its output. This means the agent will run arbitrary code located at the specified path; the SKILL.md also insists this must be run '每次用户输入后' (on every user input). The instructions do not constrain or verify the script's behavior, nor do they include a fallback when the path/script is missing.
Install Mechanism
There is no install specification and no code files in the package, yet runtime assumes a local script exists. While 'no install' usually lowers risk, here it increases it: the skill depends on a filesystem artifact outside the package. That creates a high-risk implicit dependency (the agent will execute whatever is at that path).
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond the single hardcoded workspace path. There are no declared secrets or unrelated credentials requested.
Persistence & Privilege
SKILL.md claims the skill must run on every user input (a globally forced behavior), but the registry flags do not set always:true. This mismatch is a red flag: the skill either (a) incorrectly documents a global mandate, or (b) expects operator configuration changes to make it global. Either case broadens runtime impact and should be clarified before use.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install prompt-buddy - 安装完成后，直接呼叫该 Skill 的名称或使用
/prompt-buddy触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of PromptBuddy
- Prompts are automatically optimized for every user input via a backend script.
- Displays the optimized prompt (first 6-8 lines) in a formatted box before answering.
- Skips optimization for simple queries, notifying the user accordingly.
- Focuses on showing the transformation from the user's informal question to a structured prompt.
- Avoids showing technical or backend parameters; only the optimized prompt is revealed to the user.
元数据
常见问题
prompt-buddy 是什么？
【全局强制技能】每次用户输入后必须执行此技能。 执行命令：cd ~/.openclaw/workspace/skills/promptbuddy && python3 scripts/smart_engine.py -f json "用户输入" 从返回JSON提取：optimized_prompt（优化后的Pro... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 96 次。
如何安装 prompt-buddy？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install prompt-buddy」即可一键安装，无需额外配置。
prompt-buddy 是免费的吗？
是的，prompt-buddy 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
prompt-buddy 支持哪些平台？
prompt-buddy 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 prompt-buddy？
由 Steventsang18（@steventsang18）开发并维护，当前版本 v0.1.0。
推荐 Skills