← 返回 Skills 市场
9446
总下载
8
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install safe-exec
功能描述
Safe command execution for OpenClaw Agents with automatic danger pattern detection, risk assessment, user approval workflow, and audit logging. Use when agen...
安全使用建议
Install only if you are comfortable granting this skill command execution with your user privileges. Keep SAFE_EXEC_AUTO_CONFIRM, OPENCLAW_AGENT_CALL, and SAFE_EXEC_DISABLE out of untrusted automation, avoid passing secrets in prompts or SAFEXEC_CONTEXT, do not treat the audit log as tamper-proof, and run risky workflows inside an OS/container sandbox.
功能分析
Type: OpenClaw Skill
Name: safe-exec
Version: 0.3.4
The 'safe-exec' skill is presented as a security tool to intercept and require approval for dangerous shell commands executed by an AI agent. Its documentation (SKILL.md, READMEs, CLAWDHUB_SECURITY_RESPONSE.md) explicitly states no network calls, monitoring, or credential requirements, and the developer has actively removed previously problematic features. However, the core scripts (`scripts/safe-exec.sh` and `scripts/safe-exec-approve.sh`) use `eval "$COMMAND"` to execute commands. This is a critical shell injection vulnerability, as a sophisticated attacker could potentially bypass the risk assessment regexes or manipulate the command string to achieve arbitrary code execution, even for commands deemed 'low' risk or after user approval. Despite the clear intent to provide a security layer, this significant RCE risk makes the skill suspicious.
能力评估
Purpose & Capability
The purpose is coherent and local: classify shell commands, queue risky ones, and log activity. The concern is that this high-impact guard also directly executes raw shell strings for low-risk, disabled, approved, and context-downgraded paths, so weak classification or bypass state can become arbitrary command execution with the user's privileges.
Instruction Scope
The docs disclose agent mode and environment controls, but the approval framing is stronger than the implementation: non-interactive approval skips the confirmation prompt, context keywords can downgrade commands, and broad natural-language enable/install phrases are loose for a command-execution control.
Install Mechanism
Installation is a disclosed GitHub clone with chmod and optional PATH symlinks, plus a jq dependency. I found no hidden installer, runtime network calls, credential request, or obfuscated setup behavior.
Credentials
The declared local writes fit the stated purpose and no network or credential use was found. However, environment variables can disable protections or trigger auto-confirm behavior, and SAFEXEC_CONTEXT forwards user context into child process environment and may be logged.
Persistence & Privilege
The skill persists pending requests, rules, and audit logs under ~/.openclaw and executes commands with the invoking user's shell privileges. There is no background daemon in the inspected artifacts, but the approval helper can execute queued commands non-interactively and the audit logs are ordinary local files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install safe-exec - 安装完成后，直接呼叫该 Skill 的名称或使用
/safe-exec触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.3.4
fix: 修复YAML metadata格式以符合ClawHub要求
v0.3.3
Security enhancement
v0.3.2
Add backward compatibility symlinks and improved documentation. Project restructuring with zero breaking changes - all existing users can upgrade without any modifications. New conversational installation method added.
v0.3.1
Remove markdown formatting from description, ensure English-only text
v0.3.0
Add quick install guide and GitHub issue link in description
v0.2.8
Clarify platform-agnostic design - works via in-session terminal notifications, independent of communication tools
v0.2.7
Fully English documentation with global enable mode (Enable SafeExec)
v0.2.6
Update usage to global enable mode (开启 SafeExec) instead of per-command execution
v0.2.5
Update documentation to English with conversational usage examples
v0.2.4
Fix non-interactive environment hang issue
元数据
常见问题
Safe Exec 是什么？
Safe command execution for OpenClaw Agents with automatic danger pattern detection, risk assessment, user approval workflow, and audit logging. Use when agen... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 9446 次。
如何安装 Safe Exec？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install safe-exec」即可一键安装，无需额外配置。
Safe Exec 是免费的吗？
是的，Safe Exec 完全免费（开源免费），可自由下载、安装和使用。
Safe Exec 支持哪些平台？
Safe Exec 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Safe Exec？
由 OTTTTTO（@ottttto）开发并维护，当前版本 v0.3.4。
推荐 Skills