← 返回 Skills 市场
137
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install resolved-sh-rstack
功能描述
The operator skill suite for the agentic web. Helps resolved.sh operators maximize their presence and build a successful agent-native business: audit page qu...
安全使用建议
This skill appears to be a legitimate operator toolkit for resolved.sh, but the registry metadata incorrectly omits the environment variables the SKILL.md files require. Before installing: (1) verify the skill's source (the registry lists 'unknown'); prefer the official resolved.sh GitHub if available; (2) do not provide a high-privilege API key — create a least-privileged/rescoped key or test account if possible; (3) prefer to copy-paste the generated curl commands and run them yourself instead of letting the agent execute them autonomously; (4) confirm that you are comfortable the skill will read RESOLVED_SH_API_KEY, RESOLVED_SH_RESOURCE_ID, and RESOLVED_SH_SUBDOMAIN and may send them to resolved.sh endpoints; (5) ask the publisher to correct the registry metadata to list the required env vars so the permissions are explicit. If you want to be cautious, run the skill in an environment that can be audited or where you can rotate the API key after testing.
功能分析
Type: OpenClaw Skill
Name: resolved-sh-rstack
Version: 1.0.2
The rstack skill bundle is a legitimate suite of tools designed for operators on the resolved.sh platform. It provides automated workflows for auditing page health, generating A2A agent cards, managing data marketplace listings, and registering paid service endpoints. The scripts (e.g., rstack-audit/SKILL.md, rstack-services/SKILL.md) use standard utilities like curl and python3 to interact with the official resolved.sh API and include security best practices such as SSRF validation for user-provided URLs. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.
能力评估
Purpose & Capability
The SKILL.md files uniformly require a resolved.sh subdomain, API key, and resource ID to fetch and update listings (curl calls to https://{subdomain}.resolved.sh and PUT /listing/{id}). Those credentials are exactly what the skills need for the stated purpose. However, the registry-level Requirements block provided to the scanner lists 'Required env vars: none' and 'Primary credential: none' — this is an internal inconsistency that could mislead installers about what secrets the skill needs.
Instruction Scope
The runtime instructions perform network calls (curl) to resolved.sh endpoints, parse results with inline python, generate copy-pasteable curl commands (including full PUT commands that embed the API key), and offer to run those commands if the operator confirms. All of this is consistent with a page/content/audit tool, but it does mean the agent will (when given the env vars) be able to perform live updates to your resolved.sh listing and call external registries (smithery, skills.sh, etc.). Confirm-before-run flows are present (AskUserQuestion), which reduces risk if you verify interactions before execution.
Install Mechanism
Instruction-only skill (no install spec, no code files beyond SKILL.md text). This is low-risk from an install/write-to-disk perspective since nothing is downloaded or executed at install time.
Credentials
The environment variables used across the SKILL.md files are RESOLVED_SH_API_KEY, RESOLVED_SH_RESOURCE_ID, and RESOLVED_SH_SUBDOMAIN — all proportional to the skill's function. The concern is that the registry listing claims no required env vars or primary credential, yet the skill repeatedly instructs reading/using the API key and resource ID. That mismatch could cause an operator to install the skill without realizing it requires an API key (sensitive credential).
Persistence & Privilege
always is false and there is no install-time persistence requested. The skill can invoke actions at runtime (default model invocation allowed). Because the skill can generate and optionally execute PUT/PATCH commands that include your API key, allow-listing or running it autonomously increases blast radius — prefer manual confirmation before running update operations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install resolved-sh-rstack - 安装完成后，直接呼叫该 Skill 的名称或使用
/resolved-sh-rstack触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Version 1.0.2 of resolved-sh-rstack
- No file changes detected in this release.
- Functionality and documentation remain unchanged from the previous version.
v1.0.1
Significant update expanding skillset and monetization support:
- Added new subskills: `/rstack-services` (register paid APIs) and `/rstack-content` (publish monetized content)
- Expanded skill descriptions to include supporting service endpoints, blog posts, courses, and paywalled sections
- `/rstack-audit` now checks 7 areas, including services and monetized content
- Updated quick start and use case examples to reflect new monetization and publishing capabilities
v1.0.0
rstack 1.0.0 initial release
- Introduces a suite of tools to help resolved.sh operators audit and improve their web presence.
- Includes skills for page quality review, agent card creation, data product optimization, and multi-registry distribution.
- Provides a full health check with scorecard via /rstack-audit and actionable, artifact-producing outputs.
- Designed for quick setup and iterative improvement of resolved.sh listings.
元数据
常见问题
resolved-sh-rstack 是什么？
The operator skill suite for the agentic web. Helps resolved.sh operators maximize their presence and build a successful agent-native business: audit page qu... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 137 次。
如何安装 resolved-sh-rstack？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install resolved-sh-rstack」即可一键安装，无需额外配置。
resolved-sh-rstack 是免费的吗？
是的，resolved-sh-rstack 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
resolved-sh-rstack 支持哪些平台？
resolved-sh-rstack 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 resolved-sh-rstack？
由 hichana（@hichana）开发并维护，当前版本 v1.0.2。
推荐 Skills