← 返回 Skills 市场
444
总下载
0
收藏
1
当前安装
9
版本数
在 OpenClaw 中安装
/install skilled-openclaw-advisor
功能描述
Query the local OpenClaw docs index for accurate answers about configuration, features, CLI commands, channels, providers, plugins, cron, sessions, agents, p...
安全使用建议
This skill appears to be internally consistent and does what it claims: build and query a local index of your OpenClaw docs. Before installing, consider: (1) the build script may call 'npm' and 'which' to locate the docs — ensure those binaries are present and trustworthy on your PATH (this is an operational omission, not malicious); (2) the indexer will read all markdown files under the detected docs path, so if your OpenClaw docs directory contains private information you do not want indexed, do not run the build; (3) the skill writes files under ~/.openclaw/skills-data/skilled-openclaw-advisor/, so review or relocate that directory if you have storage/policy concerns; (4) the update script can call 'openclaw message' to send local notifications — no network calls are made by the skill, but you may prefer to run updates manually or inspect the diff output first. If you want higher assurance, inspect the three included Python scripts on your machine before running build_index.py.
功能分析
Type: OpenClaw Skill
Name: skilled-openclaw-advisor
Version: 1.4.2
The skill contains undocumented telemetry in `scripts/update_index.py`, which attempts to send update notifications to a hardcoded Telegram ID (`8494006989`) via the `openclaw message` CLI. This behavior contradicts the claims in `SKILL.md` and `README.md` that the skill makes 'no external API calls' and only provides 'local notifications.' While the exfiltrated data is limited to documentation versioning and change counts, the use of a hardcoded third-party recipient and deceptive documentation are significant red flags.
能力评估
Purpose & Capability
Name/description match the code and runtime needs: the scripts scan local OpenClaw docs, build a local FTS5 index, and query it. Declared required binaries (python3, openclaw) are appropriate for the stated purpose. A minor omission: the index-builder optionally calls 'npm' and 'which' to detect docs (and uses the npm global path fallback), but 'npm' is not listed in the declared required binaries. This is an operational/packaging omission rather than a malicious mismatch.
Instruction Scope
SKILL.md and the scripts confine activity to the local machine: they read the OpenClaw docs directory, read optional openclaw.json config, and write runtime data under ~/.openclaw/skills-data/skilled-openclaw-advisor/. The update script may call the OpenClaw CLI (openclaw message) to post a local notification; no direct network calls are made by the code. The scripts will index whatever markdown files exist in the docs path (including private/local docs) — expected for this skill but worth noting.
Install Mechanism
This is instruction-only with included scripts (no external downloads). The metadata includes an exec install step that runs the local build_index.py script. The code uses only the Python stdlib and spawns local binaries; there are no network-based installers, remote archives, or third-party package pulls performed by the skill itself.
Credentials
The skill declares no required environment variables or credentials and does not attempt to access secrets. It reads ~/.openclaw/openclaw.json (documented optional config) and the local docs directory. No unrelated credentials or external service keys are requested. The only notable point: it invokes system tools (npm, which, openclaw) via subprocess; these are normal for locating local installs but were not all listed in the declared binaries.
Persistence & Privilege
The skill stores its data under ~/.openclaw/skills-data/skilled-openclaw-advisor/ (state.json, index.db, diffs, versions) consistent with the documented convention. It does not request always:true or attempt to modify other skills' configs. Autonomous invocation is allowed by default (platform standard) but does not combine with broad credential access here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skilled-openclaw-advisor - 安装完成后，直接呼叫该 Skill 的名称或使用
/skilled-openclaw-advisor触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.4.2
Fix: add openclaw to required bins; remove stale always:true from README; clarify no-external-API-calls claim
v1.4.1
Fix: clarify update_index optional notification uses local openclaw CLI (no direct network); fix zero-network-calls claim mismatch
v1.4.0
Restore bundled scripts; fix mismatch between SKILL.md claims and package contents
v1.3.0
Publish instruction-only package; scripts available via GitHub repo
v1.2.0
Fix security scan: declare python3 dependency, add install spec, explicitly document file access scope (docs dir + skills-data only), remove always flag and mandatory language
v1.1.1
Fix security scan flags: soften language, remove always flag
v1.1.0
Fix: remove hardcoded workspace paths
v1.0.1
Config standardization: removed config.json, all settings now in openclaw.json under skills.entries.skilled-openclaw-advisor.config. Fixed skill key references throughout.
v1.0.0
Initial release — local FTS5 docs index for OpenClaw. Zero API calls, sub-10ms queries. Standardized data dir: skills-data/skilled-openclaw-advisor/
元数据
常见问题
Skilled OpenClaw Advisor 是什么？
Query the local OpenClaw docs index for accurate answers about configuration, features, CLI commands, channels, providers, plugins, cron, sessions, agents, p... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 444 次。
如何安装 Skilled OpenClaw Advisor？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skilled-openclaw-advisor」即可一键安装，无需额外配置。
Skilled OpenClaw Advisor 是免费的吗？
是的，Skilled OpenClaw Advisor 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skilled OpenClaw Advisor 支持哪些平台？
Skilled OpenClaw Advisor 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skilled OpenClaw Advisor？
由 Sean Ford（@seanford）开发并维护，当前版本 v1.4.2。
推荐 Skills