← 返回 Skills 市场
272
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-market
功能描述
Use this skill to find, explore, and install new skills from the Zerone Skill Market (https://api.zerone.market/api). Trigger this when the user asks to "add...
安全使用建议
This skill is coherent for discovering and fetching install tutorials from an external marketplace, but the marketplace content can include arbitrary shell/git commands. Before approving any install: 1) Inspect the exact commands the marketplace returns — do not run them without review. 2) Avoid one-line remote-exec patterns like curl|sh or sudo unless you trust the publisher. 3) Prefer installers that come from well-known repos/releases or provide checksums/signatures; verify them if provided. 4) Run unfamiliar installs in a sandboxed environment or review the skill code after download. 5) If you want an extra safety layer, ask the agent to only fetch the tutorial but require you to perform the actual install steps manually.
功能分析
Type: OpenClaw Skill
Name: skill-market
Version: 1.0.1
The skill-market bundle is a utility for discovering and installing additional agent skills from a specific marketplace (api.zerone.market). The Python script (scripts/market.py) uses standard libraries to perform read-only API requests and includes proper URL encoding for user-supplied parameters. Most importantly, the SKILL.md instructions include explicit security guardrails, directing the AI agent to never auto-run commands and to require manual user confirmation and verification before proceeding with any installation steps.
能力评估
Purpose & Capability
Name/description match the included script and SKILL.md: the skill queries https://api.zerone.market/api for listing, info, and install tutorials. No unrelated credentials, binaries, or platform accesses are requested.
Instruction Scope
SKILL.md instructs the agent to fetch listings/info/install tutorials and to require explicit user approval before executing any install commands. This stays within the marketplace purpose. Reminder: the marketplace may return arbitrary install commands (clone, curl, run scripts) — the skill delegates the decision to the user, which is appropriate but risky in practice.
Install Mechanism
There is no automated install spec and the included scripts only perform HTTPS GETs to the declared endpoint and print JSON/text. No archives are downloaded or executed by the skill itself, lowering local install risk.
Credentials
The skill declares no required environment variables or credentials and the code does not read environment secrets. It only needs network access to the marketplace endpoint, which is proportional to its stated function.
Persistence & Privilege
always is false and the skill does not request special system privileges or modify other skills. It does instruct placing installed skills under .agent/skills/ (expected for an installer).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install skill-market - 安装完成后,直接呼叫该 Skill 的名称或使用
/skill-market触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added explicit security warnings and precautions before executing installation commands.
- Users must now confirm and approve all install commands before any installation action is taken.
- Recommended verifying package integrity and reviewing installation instructions manually or in a sandbox.
- Improved guidance to restrict privileged actions during skill installation.
- Removed README.md file.
v1.0.0
- Initial release of the skill-market.
- Enables discovery and installation of new skills from the Zerone Skill Market.
- Provides commands to list available skills, view details, check framework compatibility, and obtain install instructions.
- Guides users through skill installation, including environment checks and framework suggestions if compatibility issues arise.
- Integrates with Zerone Market API and manages skills in the local .agent/skills/ directory.
元数据
常见问题
SkillMarket 是什么?
Use this skill to find, explore, and install new skills from the Zerone Skill Market (https://api.zerone.market/api). Trigger this when the user asks to "add... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 272 次。
如何安装 SkillMarket?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-market」即可一键安装,无需额外配置。
SkillMarket 是免费的吗?
是的,SkillMarket 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
SkillMarket 支持哪些平台?
SkillMarket 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 SkillMarket?
由 Zero(@zerone-agent)开发并维护,当前版本 v1.0.1。
推荐 Skills