← 返回 Skills 市场
75
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-base-cli
功能描述
The official Skill Base CLI client. Use the `skb` (Skill Base CLI) command to search, install, update, publish, and import-from-GitHub skills from Skill Base...
安全使用建议
This SKILL.md looks like legitimate documentation for a CLI, but the registry metadata omits important runtime requirements. Before installing or following agent actions: (1) Confirm you have Node.js >=18 and trust the npm package source; (2) Be aware `skb login` creates and stores a PAT in ~/.skill-base/config.json — do not paste that PAT into chat; (3) Verify SKB_BASE_URL points to a trusted Skill Base server before publishing — publishing will upload your skill folder to that server; (4) Ask the publisher/maintainer to update the registry metadata to declare required binaries (Node.js), the SKB_BASE_URL env var, and the config path. If you are uncomfortable with the CLI installing packages or storing tokens, do not proceed.
功能分析
Type: OpenClaw Skill
Name: skill-base-cli
Version: 1.0.0
The skill bundle provides a CLI interface (`skb`) for managing OpenClaw skills, which requires high-risk capabilities including global package installation (`npm install -g`), shell command execution, and network access to a configurable backend (`SKB_BASE_URL`). While these actions are aligned with the stated purpose of a package manager, the inherent risks of downloading and executing remote code via `npm/npx` and the broad terminal access described in `SKILL.md` meet the threshold for a suspicious classification despite the lack of clear malicious intent.
能力评估
Purpose & Capability
The SKILL.md describes an official CLI (skb) used to search, install, publish, and import skills, which matches the skill name and description. However, the runtime docs require Node.js >=18 and recommend npm/npx usage, yet registry metadata lists no required binaries. That mismatch is unexpected (the CLI legitimately needs Node.js).
Instruction Scope
Instructions are focused on CLI usage: search/install/update/publish, configuring SKB_BASE_URL, and the login flow. They tell the agent to run terminal commands and to read/write ~/.skill-base/config.json (local install records and stored PAT). There is no instruction to read unrelated system files or exfiltrate data, but publishing/importing will upload folder contents to the configured server — a sensitive operation the user must approve.
Install Mechanism
This is an instruction-only skill (no install spec). SKILL.md tells users to run `npm install -g skill-base-cli` or use `npx`. That's a reasonable deployment option for a Node CLI, but the lack of an install spec in the registry metadata is an omission. Also note: running `npm install -g` executes third-party code on the user's machine, which is normal for CLIs but carries usual npm risks.
Credentials
The README references an environment variable SKB_BASE_URL and the config path ~/.skill-base/config.json (which will store auth/PATs and install records). The registry metadata declares no required env vars or config paths — this is inconsistent. The skill will cause tokens/PATs to be created and stored locally when the user runs `skb login` and will send skill files to the configured server when publishing; these behaviors are expected for the CLI but are sensitive and should be clearly declared.
Persistence & Privilege
The skill does not request always:true and does not alter other skills. It will cause the CLI to create and update files under the user's home (~/.skill-base/) and may install skills into local or IDE directories. This is normal for a CLI but means the skill can persist data (config and tokens) on the host.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-base-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-base-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
skill-base-cli 1.0.0
- Initial release of the official Skill Base CLI client.
- Search, install, update, publish, and import skills using the `skb` command.
- Includes authentication and configuration features, supporting both public and privately deployed Skill Base sites.
- Detailed command usage and troubleshooting guidance provided in SKILL.md.
- Supports import from public GitHub repositories, with authentication required for publishing and imports.
元数据
常见问题
skill-base-cli 是什么？
The official Skill Base CLI client. Use the `skb` (Skill Base CLI) command to search, install, update, publish, and import-from-GitHub skills from Skill Base... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 75 次。
如何安装 skill-base-cli？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-base-cli」即可一键安装，无需额外配置。
skill-base-cli 是免费的吗？
是的，skill-base-cli 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
skill-base-cli 支持哪些平台？
skill-base-cli 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 skill-base-cli？
由 ginuim（@ginuim）开发并维护，当前版本 v1.0.0。
推荐 Skills