← 返回 Skills 市场
Taro小程序开发技能
作者
xuyongliang
· GitHub ↗
· v1.0.1
· MIT-0
118
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install taro-miniprogram-dev
功能描述
Taro + React + TypeScript 微信小程序开发框架技能。适用于：(1) 从零初始化 Taro 项目并编译为微信小程序；(2) 创建页面、组件、样式；(3) 搭建 services 请求层（接入真实后端或 Mock 数据）；(4) 配置 TabBar、页面路由、设计系统。触发关键词：小程序开发、...
安全使用建议
This package appears to be a coherent Taro mini-program starter. Before running anything: 1) Review the template files and scripts (init_project.sh, build_project.sh) so you know what will be copied/modified and where (init script copies to ../<projectName>). 2) Run scripts from a controlled working directory to avoid accidentally creating files in an unexpected location. 3) Inspect and update placeholders: set IS_MOCK appropriately, change BASE_URL to your backend, and do not use 'touristappid' in production. 4) npm install will fetch third-party packages — check package.json versions for known vulnerabilities and run in a network/trusted environment. 5) The README suggests enabling '不校验合法域名' in the WeChat dev tools for development; only do this for local testing, not for production builds. If you want extra assurance, run the init steps manually rather than executing the provided shell scripts.
功能分析
Type: OpenClaw Skill
Name: taro-miniprogram-dev
Version: 1.0.1
The skill bundle provides a legitimate Taro development environment but contains a shell/sed injection vulnerability in 'scripts/init_project.sh'. The script uses the unsanitized '$PROJECT_NAME' variable directly within a 'sed' command, which could allow for arbitrary file manipulation or information disclosure if a specially crafted project name is provided. Additionally, 'SKILL.md' and 'scripts/build_project.sh' utilize the '--openssl-legacy-provider' flag, which reverts Node.js to weaker cryptographic standards, though this is a common (albeit risky) workaround for Webpack 4 compatibility.
能力评估
Purpose & Capability
The name/description (Taro + React + TypeScript 小程序 开发) matches the included project template, page/component examples, services stubs, build/init scripts, and documentation. There are no environment variables, binaries, or config paths requested that are unrelated to initializing/building a Taro project.
Instruction Scope
SKILL.md provides concrete developer instructions (npx @tarojs/cli init, npm install, npm run dev/build) and references only project files and local mock/BASE_URL placeholders. It does not instruct reading unrelated system files, exfiltrating secrets, or posting data to unexpected external endpoints. The only external URLs are placeholder API/base URLs and image placeholders used in UI assets.
Install Mechanism
There is no install spec (instruction-only), so nothing is auto-downloaded during install. The skill contains a project template and shell scripts (init_project.sh, build_project.sh) that copy and modify files. Those scripts use standard cp/sed operations on local files; they do not fetch code from untrusted URLs or create nonstandard system binaries.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The code contains expected development placeholders (IS_MOCK, BASE_URL) and a test AppID ('touristappid') appropriate for development. No unrelated tokens/keys are requested.
Persistence & Privilege
always:false and model invocation are normal. The included init script will create a project directory (copies template to ../<project>) and uses sed to replace placeholders — this writes files to disk outside the skill folder when the script is run. This is expected for a project initializer but the user should be aware it will modify the filesystem in the working area where it's executed.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install taro-miniprogram-dev - 安装完成后，直接呼叫该 Skill 的名称或使用
/taro-miniprogram-dev触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
纯框架版本：移除具体业务逻辑（登录/任务/金币/圈子），保留完整项目骨架、设计系统、services层骨架
v1.0.0
初始版本：Taro3 + React + TypeScript，8个页面、4模块services层、Mock数据、完整设计系统
元数据
常见问题
Taro小程序开发技能 是什么？
Taro + React + TypeScript 微信小程序开发框架技能。适用于：(1) 从零初始化 Taro 项目并编译为微信小程序；(2) 创建页面、组件、样式；(3) 搭建 services 请求层（接入真实后端或 Mock 数据）；(4) 配置 TabBar、页面路由、设计系统。触发关键词：小程序开发、... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 118 次。
如何安装 Taro小程序开发技能？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install taro-miniprogram-dev」即可一键安装，无需额外配置。
Taro小程序开发技能 是免费的吗？
是的，Taro小程序开发技能 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Taro小程序开发技能 支持哪些平台？
Taro小程序开发技能 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Taro小程序开发技能？
由 xuyongliang（@xuyongliang-eccom）开发并维护，当前版本 v1.0.1。
推荐 Skills