← 返回 Skills 市场
Ravi passwords
作者
Raunak Singwi
· GitHub ↗
· v2.1.1
· MIT-0
548
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install ravi-passwords
功能描述
Store and retrieve website credentials — password manager for domain/username/password entries. Do NOT use for API keys/secrets (use ravi-secrets) or reading...
安全使用建议
This skill's instructions call an external 'ravi' CLI and show workflows that return plaintext passwords, but the package metadata doesn't declare the CLI, jq, or any authentication mechanism. Before installing or using: verify where the 'ravi' binary comes from and trustworthiness of its publisher; confirm how you authenticate (API token, local config, or login) and where credentials are stored; ensure TLS/server identity for ravi.id; install and inspect the ravi CLI yourself (or its source code) rather than relying on this skill; do not store highly sensitive secrets (API keys) here per the skill's own note; and ask the publisher for explicit install/authentication steps and a privacy/security policy. If you can't validate those, avoid using the skill for important credentials.
功能分析
Type: OpenClaw Skill
Name: ravi-passwords
Version: 2.1.1
The ravi-passwords skill provides a CLI-based interface for managing website credentials via a remote service (ravi.id). It supports standard password management features such as creation, retrieval, updating, and deletion of entries, as well as password generation. While the skill handles sensitive data and transmits it to a remote server, its behavior is entirely consistent with its stated purpose as a password manager, and the SKILL.md contains no evidence of malicious intent, obfuscation, or prompt injection.
能力评估
Purpose & Capability
The SKILL.md describes storing/retrieving website credentials via a 'ravi' CLI (ravi passwords ...). That purpose is plausible, but the skill metadata declares no required binaries, no install steps, and no primary credential. A password-manager skill would normally require the ravi CLI binary (or an API token/config) to exist and authenticate the user; omitting those is inconsistent.
Instruction Scope
Runtime instructions show shell usage that expects the 'ravi' CLI and use of jq pipelines to parse JSON and extract plaintext passwords. The instructions themselves do not ask the agent to read unrelated files or exfiltrate data, but they do assume local tooling and an authenticated session without documenting how to obtain credentials or where authentication state is stored.
Install Mechanism
There is no install spec (instruction-only), which minimizes on-disk risk. However, the instructions rely on an external 'ravi' binary (and implicitly jq) but do not declare them or provide installation guidance — an omission that reduces transparency and may hide required setup steps.
Credentials
The skill declares no required environment variables or config paths. For a password manager, one would expect credentials, an API token, or a documented authentication flow. The lack of declared credentials or config paths is disproportionate to the sensitivity of operations (creating/retrieving plaintext passwords).
Persistence & Privilege
Flags are default: always=false and model invocation allowed. The skill does not request persistent system privileges or modify other skills. No elevated persistence concerns were found.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install ravi-passwords - 安装完成后,直接呼叫该 Skill 的名称或使用
/ravi-passwords触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.1
Auto-published from 19d2b7eea3e0a215bf8c5726dd9e1fb86307cdd7
v2.1.0
Auto-published from 291418be2de06f13e5473a1468993dc0738e1a70
v2.0.0
Auto-published from db51c4411963fdc5faa2644b6af3e7ab1936188a
v1.7.1
Auto-published from 024064a6cf1447213b584481ba7722f2fa0bf783
v1.7.0
Auto-published from 6c73eb0624f008d3cc927fdd91165c3d20c3f210
v1.6.1
Auto-published from 420494b822bf4d3a2e7d2643de7d65f6c3f192a7
v1.6.0
Auto-published from 40db4ff85e7f7ab07528a537bc78bcc99350ac24
v1.5.1
Fix workflow, publish all skills
元数据
常见问题
Ravi passwords 是什么?
Store and retrieve website credentials — password manager for domain/username/password entries. Do NOT use for API keys/secrets (use ravi-secrets) or reading... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 548 次。
如何安装 Ravi passwords?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ravi-passwords」即可一键安装,无需额外配置。
Ravi passwords 是免费的吗?
是的,Ravi passwords 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Ravi passwords 支持哪些平台?
Ravi passwords 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Ravi passwords?
由 Raunak Singwi(@raunaksingwi)开发并维护,当前版本 v2.1.1。
推荐 Skills