← 返回 Skills 市场
729
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-auto-attach
功能描述
Monitors workspace for new or updated .html, .md, .txt files and automatically attaches them to Telegram messages instead of showing code.
安全使用建议
This skill contains clear mismatches and some risky behavior — do not enable it without review. Specific recommendations: (1) Inspect and modify the script to use the correct workspace path (prefer using the runtime-provided workspace path or an environment variable rather than /home/elodyzen). (2) Add explicit extension filtering (only .html, .md, .txt) and/or a whitelist/confirmation step before sending files. (3) Declare and check for required binaries (inotifywait / inotify-tools and the openclaw message tool) in SKILL.md. (4) Avoid hard-coded paths for logs and workspace; use configurable paths. (5) Test in an isolated environment (with no secrets) to verify behavior. (6) Consider adding an opt-in prompt or per-file approval before transmitting files to Telegram. If you cannot make these changes or verify the message tool's target is the intended Telegram channel, treat the skill as potentially leaking sensitive files and do not install it in production.
功能分析
Package: skill-auto-attach (xpi)
Version: 1.0.0
Description: Automatic file attachment skill for Telegram
The skill's stated purpose is to automatically attach new or updated 'documentation files' (e.g., .html, .md, .txt) from the OpenClaw workspace to Telegram messages. However, the `auto-attach.sh` script monitors for *any* regular file creation or modification within the hardcoded `WATCH_DIR` (`/home/elodyzen/.openclaw/workspace`) and sends it via the `openclaw message send` command. This lack of file type filtering means that sensitive files (e.g., configuration files, private keys, source code with embedded secrets) that are not intended to be shared could be inadvertently copied to `/tmp` and then sent to the configured Telegram channel. While the script includes cleanup for temporary files and uses standard tools, the broad scope of file monitoring combined with the hardcoded watch directory presents a significant potential for unintended data leakage, making it suspicious. The security relies heavily on the user's understanding of what files are in their workspace and the security of the `openclaw` tool itself.
能力评估
Purpose & Capability
The claimed purpose (monitor workspace and attach .html/.md/.txt files to Telegram) roughly matches the script's observed behavior (watching a directory and sending files via the OpenClaw message tool). However there are important mismatches: the SKILL.md instructs installation under ~/.openclaw/skills and expects to work with the current workspace, while the script hard-codes WATCH_DIR=/home/elodyzen/.openclaw/workspace. The SKILL.md claims file-type filtering (.html/.md/.txt) but the script does no extension filtering and will copy and send any regular file it detects.
Instruction Scope
SKILL.md is high-level and omits several runtime details that the script performs. The script watches file creation/modify events, copies files to /tmp, and sends them via openclaw message send --target=telegram --media=...; it does not prompt the user or restrict which files are sent. The instructions do not mention the required inotifywait binary or that any file type may be transmitted. The script logs to a hard-coded user path and will run continuously once enabled.
Install Mechanism
There is no install spec (instruction-only skill with an included script), which reduces risk of arbitrary downloads. However the script depends on inotifywait (from inotify-tools) and the openclaw message CLI, neither of which are declared in SKILL.md's requirements — this is an operational mismatch that could cause silent failures or unexpected behavior when those binaries are present/absent.
Credentials
The skill requests no credentials and doesn't reach out to unknown endpoints; it sends files through the platform's message tool (expected). Nevertheless, the hard-coded WATCH_DIR and LOG_FILE point to a specific user's home (/home/elodyzen), which is disproportionate and brittle — on multi-user systems this may point at the wrong directory. More importantly, because the script does not filter by extension, it can exfiltrate arbitrary files from the watched directory (including secrets) to a Telegram channel without per-file confirmation.
Persistence & Privilege
The skill is not marked always:true and doesn't request system-wide config changes. It will run a long-lived watcher process once enabled and write logs under its own skill directory and temp files under /tmp. That persistent monitoring combined with unrestricted file sending increases risk of accidental data leakage, but it does not itself indicate privilege escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-auto-attach - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-auto-attach触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of skill-auto-attach.
- Monitors the OpenClaw workspace for new or updated documentation files (.html, .md, .txt).
- Automatically attaches these files to Telegram messages as file attachments, rather than displaying code.
- Uses the message tool with filePath for Telegram compatibility.
- Copies files to /tmp and assigns unique filenames.
- Operates silently unless a relevant file is updated.
- Requires OpenClaw v2026.2+ and Telegram channel access.
元数据
常见问题
Skill Auto Attach 是什么？
Monitors workspace for new or updated .html, .md, .txt files and automatically attaches them to Telegram messages instead of showing code. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 729 次。
如何安装 Skill Auto Attach？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-auto-attach」即可一键安装，无需额外配置。
Skill Auto Attach 是免费的吗？
是的，Skill Auto Attach 完全免费（开源免费），可自由下载、安装和使用。
Skill Auto Attach 支持哪些平台？
Skill Auto Attach 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Auto Attach？
由 elodyzen（@elodyzen）开发并维护，当前版本 v1.0.0。
推荐 Skills