← 返回 Skills 市场
ylzha

Shopprentice

作者 YLZha · GitHub ↗ · v0.5.1 · MIT-0
macoslinuxwindows ⚠ suspicious
280
总下载
0
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install shopprentice
功能描述
AI-powered parametric furniture modeling for Fusion 360. Generates production-ready CAD models with real joinery from natural language, images, or reference...
安全使用建议
Before installing, consider the following: 1) Audit the installer: the README suggests running a remote script via curl|bash. Instead of piping directly to bash, download install.sh and inspect it (or clone the repo) before running. 2) Backup important Fusion documents: the add-in can run scripts that rebuild or wipe document state (execute_script with clean/force_clean), and the ParamEditor writes patched scripts to disk; unexpected runs could overwrite work. 3) Verify network exposure: the MCP server listens on localhost:9100 — confirm it's bound to loopback only and your environment firewall is configured as you expect. 4) Prefer manual execution: if you are uncomfortable with automatic rebuilds, avoid using the ParamEditor 'Rebuild' or ensure you trigger rebuilds only when ready; run generated scripts in sandbox mode or manually inspect scripts before execution. 5) If you need extra assurance, install in an isolated environment or VM, or clone the repo and install from local files rather than using curl | bash. 6) The skill does not request external credentials, but treat it like any plugin that executes code: review the source (install.sh, execute_script, param editor callbacks) and ensure you trust the repository and its maintainers before enabling it in your production Fusion environment.
功能分析
Type: OpenClaw Skill Name: shopprentice Version: 0.5.1 The skill provides a high-privilege automation framework for Autodesk Fusion 360 that includes a localhost HTTP server (addin/server/mcp_server.py) and a tool for executing arbitrary Python scripts (addin/tools/execute_script.py). While these capabilities are aligned with the stated goal of AI-powered CAD modeling, they effectively create a Remote Code Execution (RCE) primitive on the user's machine. The installer (install.sh) utilizes the risky 'curl | bash' pattern and modifies local configuration files. Although no evidence of intentional malice or data exfiltration was found, the inherent risk of the execution model and the broad system access granted to the AI agent within the CAD environment justify a suspicious classification.
能力标签
crypto
能力评估
Purpose & Capability
Name/description (parametric Fusion 360 modeling) aligns with the code and tools included: a Fusion 360 add-in, MCP JSON-RPC server on localhost:9100, script generators, examples, templates, and a palette for parameter editing. The declared dependency (git) is reasonable for cloning the repo; no unrelated cloud credentials or unrelated binaries are requested.
Instruction Scope
The SKILL.md and CLAUDE.md instruct agents to generate and execute Fusion 360 Python scripts via a local MCP server; that is expected. However, several runtime behaviors deserve caution: the ParamEditor writes patched scripts back to disk and calls the execute_script handler with clean=True and force_clean=True (bypassing provenance guards), which can intentionally rebuild/wipe document state. The add-in also exposes many tools (execute_script, sync_script, capture_design, modify_parameters, etc.) giving the agent broad ability to read document state and modify or overwrite scripts and scratch documents. These actions are coherent with the skill's purpose but are destructive if used incorrectly or without user consent.
Install Mechanism
Registry install metadata lists only 'brew git' (low risk), but the SKILL.md and README recommend a one-line installer: curl -sSL https://raw.githubusercontent.com/ShopPrentice/shopprentice/main/install.sh | bash. Executing a remote install script piped directly to a shell is high-risk because it runs arbitrary code from the network. The repo does include install.sh and install-openclaw.sh (so source is auditable), but the advertised curl|bash pattern is still a notable supply-chain risk unless you first review the script locally.
Credentials
The skill requests no environment variables or external credentials and only requires git. There are no oddly unrelated secrets or config paths declared. All declared network access is local-only (localhost:9100) for MCP communication.
Persistence & Privilege
The skill does not request 'always: true'. It installs an add-in that runs a local MCP server (binds to localhost:9100) and creates a dockable parameter editor; these grant the skill ongoing presence while the add-in is enabled, which is expected for an IDE/plugin-style integration. The notable privilege is the ability to write script files and to call execute_script (including a force_clean bypass in the ParamEditor), giving it capacity to modify or rebuild Fusion documents — sensible for this plugin but potentially risky if triggered without explicit user intent.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install shopprentice
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /shopprentice 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.5.1
- Added woodworking domain documentation at codex/woodworking/SKILL.md for improved modularity and reuse. - Updated installation instructions and developer documentation in DEVELOPMENT.md, README.md, and install.sh. - Enhanced or clarified guidance in SKILL.md without altering core modeling rules. - Minor internal and documentation updates preparing for wider woodworking use in Shopprentice.
v0.5.0
**0.5.0 is a major update with new additive modeling support and expanded joinery templates.** - Adds full "additive mode" support: model features can be appended to existing Fusion 360 documents without erasing user work. - New developer documentation: DEVELOPMENT.md explains architecture and contribution guidelines. - Significant updates to design rules and usage flows in SKILL.md, including clear workflows for tracking, syncing, and adding operations to existing models. - Expanded joinery template coverage: new test cases and template scripts for bowtie, dowel, and drawbore joints. - Examples and documentation updated to reflect new features and modeling patterns. - Internal code improvements and additional test coverage for joinery templates.
v0.4.1
shopprentice 0.4.1 - Version bump from 0.4.0 to 0.4.1. - Documentation updates: minor revisions and fixes to SKILL.md and README files. - No changes to core functionality or dependencies.
v0.4.0
**Introduces advanced lofted surface modeling for organic woodworking shapes.** - Added support for organic/lofted modeling techniques, including detailed documentation and example scripts. - Included 19 new test fixtures to ensure reliability of new loft-related features. - Expanded documentation on woodworking appearance and organic shape workflows. - Updated Esherick stool example with improved parametric and organic features. - Refined modeling philosophy and best practices for complex feature integration in Fusion 360.
v0.3.1
Version 0.3.1 introduces a streamlined and clarified skill description, removing redundancy and focusing on essential usage and design philosophy. - Removed the "Prerequisites" section from SKILL.md for a more concise overview. - Updated and clarified the "Design Philosophy" to emphasize practical modeling rules and woodworking best practices. - No changes to underlying functionality or execution methods. - Documentation improved for easier onboarding and understanding.
v0.2.1
- Added a new compatibility section to SKILL.md detailing recommended and tested language models, plus usage notes. - Updated required binaries: removed "claude" from the dependency list; now only "git" is required. - README and packaging script updated to reflect revised dependencies and skill compatibility. - Version bumped from 0.1.3 to 0.2.1.
v0.1.3
**Added security and privacy transparency for local script execution.** - Declared local network access: MCP JSON-RPC server on localhost:9100 for live Fusion 360 script execution. - Documented install method security: one-line installer clones the repository and symlinks the Fusion 360 add-in; source is fully auditable. - Provided explanation of code execution: scripts are saved locally, can be reviewed before execution, and manual execution is supported if the add-in is not used. - Version updated to 0.1.3 to reflect security and metadata enhancements.
v0.3.0
**Major update with new woodworking capabilities and example projects.** - Added support for organic shapes in woodworking (see new `woodworking/organic-shapes.md`). - Introduced an Esherick stool example project with modeling script and documentation. - Expanded woodworking helpers and documentation for advanced joinery and constructions. - Initial test coverage for spatial queries in woodworking scripts. - Updated documentation and skill manifest for version 0.3.0.
v0.1.2
Initial public release with extensive woodworking modeling support for Fusion 360. - Adds core ShopPrentice add-in files and Python modules for parametric script generation and live execution. - Introduces modular woodworking documentation covering appearance, incremental updates, advanced joinery, templates, and hardware. - Provides structured SKILL metadata and installation requirements for easier onboarding. - Implements a design philosophy focused on real-world furniture construction techniques, components, and joinery in CAD. - Includes topic and reference guides for flexible, production-ready furniture modeling.
v1.0.0
v1.0.0 — Initial Release First public release. Parametric furniture modeling for Fusion 360 via AI agents. - 9 core design rules for parametric, feature-based modeling with combine-based joinery - 13 joinery types with templates (M&T, drawbore, dovetail, domino, finger joint, etc.) - 20+ furniture type reference guides (tables, chairs, cabinets, beds, boxes, etc.) - Angled construction support (splayed legs, compound angles) - Interactive editing mode — detect UI changes, interpret intent, rebuild correctly - Wood appearance with grain-aligned textures - Tested with Claude Code (Opus/Sonnet). Requires ShopPrentice add-in for live Fusion 360 execution — see Prerequisites in SKILL.md.
元数据
Slug shopprentice
版本 0.5.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 10
常见问题

Shopprentice 是什么?

AI-powered parametric furniture modeling for Fusion 360. Generates production-ready CAD models with real joinery from natural language, images, or reference... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 280 次。

如何安装 Shopprentice?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install shopprentice」即可一键安装,无需额外配置。

Shopprentice 是免费的吗?

是的,Shopprentice 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Shopprentice 支持哪些平台?

Shopprentice 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(macos, linux, windows)。

谁开发了 Shopprentice?

由 YLZha(@ylzha)开发并维护,当前版本 v0.5.1。

💬 留言讨论