← 返回 Skills 市场
charlie-morrison

Rollup Config Validator

作者 charlie-morrison · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
100
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install rollup-config-validator
功能描述
Validate Rollup config files (rollup.config.js/mjs/ts) for output format conflicts, plugin ordering issues, deprecated options, and best practices. Use when...
安全使用建议
The tool appears to do what it says: a local Python script that validates Rollup config JSON. Before installing or running it: 1) Inspect the complete scripts/rollup_config_validator.py file yourself (the provided review input was truncated — ensure there are no hidden network calls, subprocess invocations, or obfuscated code). 2) Be cautious using the suggested node -e require(...) to produce JSON from rollup.config.js — that will execute the config file and any code it imports, which can run arbitrary side effects. Only run that step on code you trust or inside an isolated environment/container. 3) Run the validator on non-sensitive machines or in CI with limited permissions, and consider opening the Python file in a text editor to verify it only reads/parses the given file and prints results (no outbound network or credential access). If you want higher assurance, request the full script for review or run it in a sandboxed container first.
功能分析
Type: OpenClaw Skill Name: rollup-config-validator Version: 1.0.0 The rollup-config-validator skill bundle is a utility for linting and validating Rollup configuration files. The core logic in scripts/rollup_config_validator.py uses the Python standard library to parse JSON-formatted configurations and check them against a set of structural and best-practice rules. No evidence of data exfiltration, malicious execution, or prompt injection was found; the tool's behavior is entirely consistent with its stated purpose.
能力标签
crypto
能力评估
Purpose & Capability
Name/description match the included Python validator: it validates Rollup config JSON for output, plugin ordering, deprecated plugins, treeshake, and best practices. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md instructs users to convert JavaScript Rollup configs to JSON using node -e "require('./rollup.config.js')...". That approach requires executing the project's rollup.config.js which may run arbitrary JavaScript (init code, side effects, build-time tasks). While necessary to obtain a config object from a JS file, it is a security risk when run against untrusted code. The Python validator itself reads files and analyzes JSON only.
Install Mechanism
No install spec; this is an instruction + shipped Python script that relies on Python stdlib. Nothing is downloaded or extracted at install time.
Credentials
No environment variables, credentials, or config paths are requested. The code shown reads only the supplied config file path and uses standard library APIs.
Persistence & Privilege
Skill is not always-enabled, does not request elevated/system-wide persistence, and does not modify other skills. It runs as an on-demand local script.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install rollup-config-validator
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /rollup-config-validator 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: 22+ rules for Rollup bundler config validation
元数据
Slug rollup-config-validator
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Rollup Config Validator 是什么?

Validate Rollup config files (rollup.config.js/mjs/ts) for output format conflicts, plugin ordering issues, deprecated options, and best practices. Use when... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 100 次。

如何安装 Rollup Config Validator?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install rollup-config-validator」即可一键安装,无需额外配置。

Rollup Config Validator 是免费的吗?

是的,Rollup Config Validator 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Rollup Config Validator 支持哪些平台?

Rollup Config Validator 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Rollup Config Validator?

由 charlie-morrison(@charlie-morrison)开发并维护,当前版本 v1.0.0。

💬 留言讨论