← 返回 Skills 市场
🔌

SAFE-Bootstrapper

作者 Agentsey · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
122
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install safe-bootstrapper
功能描述
Deterministic setup and remediation helper for installed OpenClaw skills. Resolve a target skill, apply sandbox-local remediation when safe, and produce a st...
安全使用建议
This skill appears coherent and low-risk: it only performs sandbox-local, deterministic setup steps and forbids network installs and credential requests. Before using it, ensure you run it in a properly enforced sandbox (so file and network isolation are real). Be aware it may read and write files inside the target workspace (for example copying .env.example → .env) — remove any sensitive data from the workspace before running. Note also that it will not install dependencies or bring up services: if the target requires network installs, browser/OAuth flows, or databases you will need to handle those outside this skill. If you need higher assurance, review the produced JSON setup report and the tool_call/evidence entries after a run to confirm only expected sandbox-local actions were taken.
功能分析
Type: OpenClaw Skill Name: safe-bootstrapper Version: 1.0.0 The safe-bootstrapper skill is a utility designed to automate the local environment setup (e.g., git init, directory creation, .env file preparation) for other skills within a sandbox. It contains robust safety instructions in SKILL.md that explicitly forbid network access, credential requests, and complex shell operations like pipes or redirects, while also requiring a preflight check to ensure it is running in a restricted environment.
能力评估
Purpose & Capability
Name/description align with behavior: the skill is an instruction-only sandboxed preparer for other skills. It declares no env vars, no binaries, and does not attempt to perform network installs or require cloud credentials — all consistent with a local bootstrapper.
Instruction Scope
SKILL.md limits actions to sandbox-local deterministic primitives (git init, mkdir, copying env examples, rerunning local commands) and explicitly forbids network downloads, dependency installs, VCS commits, or host escapes. The only small ambiguity is the phrasing about 'asking the target for the first concrete setup step' — this implies interacting with the resolved target skill, but the skill also states it will not read SKILL.md unless necessary and will operate only within the current sandbox. Overall the runtime instructions remain within the stated purpose.
Install Mechanism
Instruction-only with no install spec and no code files; nothing is written to disk by an installer. README references a recommended sandbox image (including curl/jq) but the skill itself forbids using network downloads, so there is no hidden download/install behavior.
Credentials
No required environment variables, no primary credential, and no config paths requested. The skill's allowed actions (creating .env from examples, writing local files) are proportionate to a local bootstrapper. It explicitly refuses to ask users for real credentials.
Persistence & Privilege
always is false and disable-model-invocation is true (user-invocable only), so it cannot be auto-run by the model and does not request permanent elevated presence. It also forbids modifying VCS history or other skills' configs. This is an appropriate privilege footprint for the described function.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install safe-bootstrapper
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /safe-bootstrapper 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of safe-bootstrapper. - Provides a deterministic, sandbox-local bootstrapper for OpenClaw skills, focusing on safe setup and remediation. - Accepts requests to resolve a target skill, attempt local remediations, and generate a structured setup report. - Only executes a small, explicit set of safe primitives in the current sandbox—never risky commands or host modifications. - Reports actual actions and remaining blockers in a concise JSON response. - Designed to prepare skills for fuzzing without accidental host-side or unsafe operations.
元数据
Slug safe-bootstrapper
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

SAFE-Bootstrapper 是什么?

Deterministic setup and remediation helper for installed OpenClaw skills. Resolve a target skill, apply sandbox-local remediation when safe, and produce a st... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 122 次。

如何安装 SAFE-Bootstrapper?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install safe-bootstrapper」即可一键安装,无需额外配置。

SAFE-Bootstrapper 是免费的吗?

是的,SAFE-Bootstrapper 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

SAFE-Bootstrapper 支持哪些平台?

SAFE-Bootstrapper 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 SAFE-Bootstrapper?

由 Agentsey(@agentsey)开发并维护,当前版本 v1.0.0。

💬 留言讨论