← 返回 Skills 市场
Skill Dependency Resolver
作者
utopiabenben
· GitHub ↗
· v0.1.0
· MIT-0
101
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-dependency-resolver
功能描述
Automatically detects and resolves conflicting Python package versions across multiple skill requirements.txt files, generating a merged, conflict-free requi...
安全使用建议
This skill is not obviously malicious, but its documentation overpromises relative to what the code actually does. Before installing or running: 1) Review/verify behavior in a sandbox: run the CLI against a controlled test skills_dir and inspect the generated requirements-merged.txt before using it. 2) Be aware the resolver only detects conflicts for exact '==' versions and will likely miss or mishandle ranges and complex specifiers; do not rely on it to find all incompatibilities. 3) Manual mode uses interactive input(), which will hang in non-interactive automation; avoid using it in CI without modification. 4) install.sh creates a symlink in ~/.local/bin and may back up an existing file to .bak — confirm you allow that file operation. 5) If you need full operator/range handling or recursive scanning, ask the author for code updates or run the tests and extend resolver.py; otherwise treat outputs as advisory and always inspect the merged file before applying pip installs.
功能分析
Type: OpenClaw Skill
Name: skill-dependency-resolver
Version: 0.1.0
The skill-dependency-resolver is a utility designed to merge Python requirements.txt files and resolve version conflicts. Analysis of the source code (resolver.py, cli.py) and installation script (install.sh) shows no signs of data exfiltration, malicious execution, or prompt injection. It operates entirely using the Python standard library and performs standard filesystem operations consistent with its stated purpose of managing workspace dependencies.
能力评估
Purpose & Capability
The declared purpose (detect and resolve Python package version conflicts across skills) matches what the code and CLI attempt to do. No unrelated credentials, binaries, or network access are requested. The package is self-contained and uses only the Python standard library.
Instruction Scope
SKILL.md and README claim recursive scanning (os.walk), skipping tests/node_modules, and support for a wide range of version operators (>=, <=, ~=, != and range expressions). The actual implementation: - scans only top-level children of the provided skills_dir (does not recurse) - detects conflicts only by collecting exact '==' versions (it ignores ranges for conflict detection) - parsing and conflict logic are simplistic (regex + digit-only version extraction). These are functional mismatches: the runtime behavior is narrower than documented and may miss conflicts or produce incorrect merges. Additionally, manual mode uses input() which will block in non-interactive contexts.
Install Mechanism
No remote downloads or third-party package installs. install.sh creates a symlink of the CLI into ~/.local/bin and marks the script executable. This is low-risk but does modify the user's ~/.local/bin and may overwrite an existing CLI (it attempts to back up with .bak).
Credentials
The skill requests no environment variables, no credentials, and no config paths. It reads requirements.txt files under the user-supplied skills_dir and writes a merged requirements file to an output path supplied by the user — all of which are proportional to its stated purpose.
Persistence & Privilege
The skill does not request always:true, does not install background services, and does not modify other skills' configs. Its only persistent change (if installed) is a symlink in ~/.local/bin pointing to the skill script.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-dependency-resolver - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-dependency-resolver触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release: automatically detect and resolve Python package conflicts between skills. Scans requirements.txt, identifies version conflicts, and generates merged requirements.
元数据
常见问题
Skill Dependency Resolver 是什么？
Automatically detects and resolves conflicting Python package versions across multiple skill requirements.txt files, generating a merged, conflict-free requi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 101 次。
如何安装 Skill Dependency Resolver？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-dependency-resolver」即可一键安装，无需额外配置。
Skill Dependency Resolver 是免费的吗？
是的，Skill Dependency Resolver 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skill Dependency Resolver 支持哪些平台？
Skill Dependency Resolver 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Dependency Resolver？
由 utopiabenben（@utopiabenben）开发并维护，当前版本 v0.1.0。
推荐 Skills