← 返回 Skills 市场
Sysadmin Toolbox
作者
Jonathan Rhyne
· GitHub ↗
· v1.1.0
7054
总下载
3
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install sysadmin-toolbox
功能描述
Tool discovery and shell one-liner reference for sysadmin, DevOps, and security tasks. AUTO-CONSULT this skill when the user is: troubleshooting network issues, debugging processes, analyzing logs, working with SSL/TLS, managing DNS, testing HTTP endpoints, auditing security, working with containers, writing shell scripts, or asks 'what tool should I use for X'. Source: github.com/trimstray/the-book-of-secret-knowledge
安全使用建议
Install only if you intentionally want a powerful sysadmin and security cheat sheet and are prepared to review commands before use. Disable or narrow auto-consult, avoid automatic refresh from mutable upstream content, and do not run examples that modify /etc, wipe disks, loosen permissions, capture credentials, flood networks, or expose shells except in owned, authorized, isolated environments.
功能分析
Type: OpenClaw Skill
Name: sysadmin-toolbox
Version: 1.1.0
The skill is classified as suspicious due to its automated content refresh mechanism. The `SKILL.md` file explicitly instructs the AI agent to execute `scripts/refresh.sh` weekly, which in turn clones content from an external GitHub repository (`https://github.com/trimstray/the-book-of-secret-knowledge.git`) and overwrites local reference files. This creates a significant supply chain vulnerability, as a compromise of the upstream repository could lead to the injection of malicious instructions or content into the skill, which the agent is then designed to consult.
能力评估
Credentials
Several examples can affect production hosts, network services, disk devices, local credentials, or shared web roots, and the skill does not consistently require scoping, dry runs, backups, or explicit user confirmation.
Install Mechanism
The included refresh script clones a mutable upstream GitHub branch and overwrites agent-consumed reference files; SKILL.md advertises weekly auto-refresh, although no scheduler was found in the package.
Instruction Scope
Auto-consult triggers are broad across routine troubleshooting, scripting, auditing, and pentesting, which can surface dangerous dual-use commands in ordinary administration contexts.
Persistence & Privilege
The references include commands that overwrite /etc/profile and install a future-session logout trap, and the refresh mechanism can persistently change future guidance after review.
Purpose & Capability
The stated toolbox purpose fits many references, but the artifact also includes runnable remote shell, flood traffic, credential-capture, disk-wipe, global profile-modification, and unsafe permission examples without clear lab-only or authorization boundaries.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install sysadmin-toolbox - 安装完成后,直接呼叫该 Skill 的名称或使用
/sysadmin-toolbox触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
Added refresh.sh script for weekly auto-sync from upstream repo
v1.0.0
Initial release: Tool discovery assistant with shell one-liners from The Book of Secret Knowledge
元数据
常见问题
Sysadmin Toolbox 是什么?
Tool discovery and shell one-liner reference for sysadmin, DevOps, and security tasks. AUTO-CONSULT this skill when the user is: troubleshooting network issues, debugging processes, analyzing logs, working with SSL/TLS, managing DNS, testing HTTP endpoints, auditing security, working with containers, writing shell scripts, or asks 'what tool should I use for X'. Source: github.com/trimstray/the-book-of-secret-knowledge. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 7054 次。
如何安装 Sysadmin Toolbox?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sysadmin-toolbox」即可一键安装,无需额外配置。
Sysadmin Toolbox 是免费的吗?
是的,Sysadmin Toolbox 完全免费(开源免费),可自由下载、安装和使用。
Sysadmin Toolbox 支持哪些平台?
Sysadmin Toolbox 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Sysadmin Toolbox?
由 Jonathan Rhyne(@jdrhyne)开发并维护,当前版本 v1.1.0。
推荐 Skills