← 返回 Skills 市场
duclawbot

Run

作者 Duclawbot · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
424
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install run
功能描述
The universal execution primitive for AI agents. A secure, sandboxed environment designed to compile, execute, and manage code, scripts, and automated workfl...
安全使用建议
This SKILL.md reads like a high-level specification rather than an implemented, reviewable feature. Before installing, ask the publisher for: (1) implementation code or an install spec showing how sandboxing, network isolation, and biometric confirmation are enforced; (2) a list of required host binaries, services, and credentials (e.g., gVisor, Firecracker, cloud keys) and why each is needed; (3) an access-control and audit plan (how executions are logged, who can approve high-risk actions, how whitelists are managed); (4) provenance (who operates the runtime and where it runs). If you cannot review an implementation, avoid enabling autonomous invocation for this skill and prefer manual invocation only. Treat this skill as potentially dangerous until its concrete implementation and least-privilege controls are provided and reviewed.
功能分析
Type: OpenClaw Skill Name: run Version: 1.0.0 The skill bundle consists solely of metadata and a descriptive documentation file (skill.md) outlining a conceptual execution framework for an AI agent. It contains no executable code, implementation logic, or instructions that suggest malicious intent, data exfiltration, or prompt injection; instead, it focuses on describing standard utility functions like sandboxed code execution and resource management.
能力评估
Purpose & Capability
The name and description match the SKILL.md: this is intended as a universal execution primitive. However, the document claims hardware-level sandboxing (gVisor/Firecracker), network isolation, biometric confirmations, and deployment to cloud-edge nodes while the skill is instruction-only and requests no binaries, installs, or credentials. Those runtime capabilities would require privileged host components and install steps that are not declared — a mismatch between claims and what the skill actually requires/provides.
Instruction Scope
The instructions grant broad, open-ended authority: 'execute' arbitrary code snippets with auto-dependency injection, 'automate' long-running jobs, and 'deploy' to production/edge. The SKILL.md is high-level and lacks concrete, enforceable steps for how sandboxing, network whitelisting, or biometric confirmations are implemented. Vague guidance like this gives the agent wide discretion to run or schedule arbitrary code without clear, auditable constraints.
Install Mechanism
There is no install spec or code — instruction-only. That is lowest-risk from a supply-chain perspective, but it also means the file is purely a policy/behavior description and cannot actually provide the claimed sandboxing or system-level protections. The absence of an implementation is itself a security and trust problem.
Credentials
The skill declares no required environment variables, binaries, or config paths, which on the surface is proportionate. However, its stated capabilities (deploying to cloud-edge, integrating hardware sandboxes) typically require credentials, host agents, or binaries; their absence is an unexplained inconsistency.
Persistence & Privilege
always is false (good) but model invocation is allowed (default). Because the SKILL.md authorizes running arbitrary code and scheduling automated tasks, allowing autonomous invocation increases risk: an agent could trigger executions without clear, enforceable controls. The combination of vague execution authority and autonomous invocation is concerning.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install run
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /run 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial execution layer release
元数据
Slug run
版本 1.0.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Run 是什么?

The universal execution primitive for AI agents. A secure, sandboxed environment designed to compile, execute, and manage code, scripts, and automated workfl... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 424 次。

如何安装 Run?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install run」即可一键安装,无需额外配置。

Run 是免费的吗?

是的,Run 完全免费(开源免费),可自由下载、安装和使用。

Run 支持哪些平台?

Run 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Run?

由 Duclawbot(@duclawbot)开发并维护,当前版本 v1.0.0。

💬 留言讨论