← 返回 Skills 市场
RobotX Deploy CLI
作者
haibingtown
· GitHub ↗
· v1.0.1
· MIT-0
376
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install robotx
功能描述
Use the robotx CLI to deploy, manage versions, and check status for RobotX applications.
安全使用建议
This skill appears to be a genuine RobotX CLI helper, but take care before using it. Key actions to consider:
- Do not blindly run the recommended 'curl | bash' install lines; review the install script contents on GitHub first or prefer the 'go install' method. Pipe-to-shell runs arbitrary remote code.
- The SKILL.md references ROBOTX_BASE_URL and ROBOTX_API_KEY and a local config (~/.robotx.yaml) even though the registry metadata lists no env vars — treat API keys as sensitive and avoid pasting them into untrusted environments.
- Confirm the upstream repository/author (haibingtown) and the robotx server domain are legitimate before providing credentials.
- If you plan to let an autonomous agent use this skill, ensure it will not leak the API key or config contents in outputs sent to external services you don't control.
- Prefer running installs and initial logins manually, review any scripts, and lock permissions on ~/.robotx.yaml if created.
If you can obtain a verified homepage/repository or a signed release for the CLI, that would materially reduce the risk and increase confidence.
功能分析
Type: OpenClaw Skill
Name: robotx
Version: 1.0.1
The skill instructions in SKILL.md direct the agent to install software using 'curl | bash' from a remote GitHub repository (haibingtown/robotx_cli), which is a high-risk pattern that could lead to arbitrary code execution. While the tool's stated purpose is application deployment, the instructions encourage the agent to execute unverified remote scripts and manage sensitive credentials (ROBOTX_API_KEY), posing a significant security risk if the remote source is compromised.
能力评估
Purpose & Capability
Name/description match the SKILL.md content: it is a CLI helper for RobotX that covers deploy, versions, status, logs, and publish. However, the metadata declares no required environment variables or credentials while the SKILL.md explicitly references ROBOTX_BASE_URL, ROBOTX_API_KEY, and a local config file (~/.robotx.yaml). The source/homepage are also absent, increasing uncertainty about provenance.
Instruction Scope
The instructions tell the agent to run commands that will use credentials (robotx commands, robotx login) and to write/read ~/.robotx.yaml or use env vars. Critically, the SKILL.md tells the agent to install the CLI by piping a script from raw.githubusercontent.com into bash (curl ... | bash) — that executes remote code on the agent's machine. The instructions otherwise stay on-task and do not ask to read unrelated system files, but the pipe-to-shell install and use of sensitive credentials broaden the risk surface.
Install Mechanism
Although the skill itself has no platform install spec, the guidance recommends 'curl -fsSL https://raw.githubusercontent.com/haibingtown/robotx_cli/main/scripts/install.sh | bash' (pipe-to-bash) and a fallback 'curl ... go-install.sh | bash'. Download-and-execute from a raw GitHub URL is common but high-risk because it runs unreviewed code; the alternative recommended (go install from github.com/haibingtown/robotx_cli) is safer. The author repository (haibingtown) is a personal org/user, and no official homepage or signed release is provided.
Credentials
The only credentials referenced (ROBOTX_BASE_URL and ROBOTX_API_KEY, or ~/.robotx.yaml) are appropriate for a deployment CLI. However, the skill registry metadata did not declare any required env vars or a primary credential even though the instructions rely on these values. API keys are sensitive — exposing them via agent outputs or installing untrusted code increases exfiltration risk.
Persistence & Privilege
The skill does not request always:true, does not include an install manifest that writes system-wide config, and is instruction-only. The only persistent change suggested is writing credentials to ~/.robotx.yaml, which is reasonable for a CLI but should be handled carefully. The skill does not request or modify other skills' configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install robotx - 安装完成后，直接呼叫该 Skill 的名称或使用
/robotx触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Clarified the authentication pre-check process to always try interactive browser-based `robotx login` first before falling back to manual API key setup.
- Expanded instructions for `robotx login`, including browser flow, user code, file updates, and headless/remote options.
- Updated fallback guidance to indicate manual API key setup is only recommended if login is not possible or fails.
- No functional command changes; all core CLI usage remains the same.
v1.0.0
Initial release of the robotx deployment CLI skill.
- Provides CLI commands for deploying, managing versions, and checking status of RobotX applications.
- Includes guidance on installation, configuration, authentication, and usage best practices.
- Details command syntax for deploy, projects, versions, status, logs, and publish actions.
- Supports machine-readable JSON output for agent/workflow integrations.
- Notes on authentication pre-checks and credential setup for different environments.
- Documents all common robotx CLI use cases and flags.
元数据
常见问题
RobotX Deploy CLI 是什么？
Use the robotx CLI to deploy, manage versions, and check status for RobotX applications. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 376 次。
如何安装 RobotX Deploy CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install robotx」即可一键安装，无需额外配置。
RobotX Deploy CLI 是免费的吗？
是的，RobotX Deploy CLI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
RobotX Deploy CLI 支持哪些平台？
RobotX Deploy CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 RobotX Deploy CLI？
由 haibingtown（@haibingtown）开发并维护，当前版本 v1.0.1。
推荐 Skills