← 返回 Skills 市场
dinghaibin

Template Tool

作者 BIN · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
36
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install template-tool
功能描述
Process text templates with variable substitution. Use for generating dynamic content from template files.
使用说明 (SKILL.md)

Template - Text Template Processor

Replace placeholders in template files with provided values. Supports variable substitution with configurable delimiters for content generation.

Usage

template-tool [options] \x3Ctemplate_file> [key=value...]

Options

  • -d DELIM: Use custom delimiter (default: {{ }})
  • -o FILE: Write output to file

Examples

template-tool greeting.txt name=World
template-tool report.md title="Annual Report" year=2026
echo "Hello {{name}}" | template-tool name=Jack
安全使用建议
Install only if you are comfortable reviewing the bundled scripts. Until the path handling is fixed, run it in a scratch directory, use simple template names without slashes or '..', and verify which script the 'template-tool' command actually invokes.
功能分析
Type: OpenClaw Skill Name: template-tool Version: 1.0.0 The bundle provides project scaffolding and template processing utilities, but contains a path traversal vulnerability in 'scripts/template.py'. The script uses the user-provided 'name' and 'output' arguments to construct file paths without sanitizing for directory traversal sequences (e.g., '..') or absolute paths, allowing for arbitrary file writes. Additionally, there is a discrepancy between the CLI usage described in 'SKILL.md' and the actual arguments accepted by the scripts.
能力评估
Purpose & Capability
The documented text-substitution purpose is mostly coherent with scripts/tpl.py, but scripts/template.py adds an undocumented project-scaffolding file writer with unsafe path construction.
Instruction Scope
SKILL.md contains ordinary usage examples and does not include goal-hijacking, forced tool use, or hidden agent-control instructions.
Install Mechanism
The registry says there is no install spec and calls this instruction-only, while the package includes executable Python scripts; the exact command entry point is ambiguous.
Credentials
Local file creation is expected for a template tool, but scripts/template.py does not confine generated filenames to the selected output directory.
Persistence & Privilege
No credentials, accounts, background services, or ongoing persistence are shown; the persistent effect is limited to generated local files when invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install template-tool
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /template-tool 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug template-tool
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Template Tool 是什么?

Process text templates with variable substitution. Use for generating dynamic content from template files. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 36 次。

如何安装 Template Tool?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install template-tool」即可一键安装,无需额外配置。

Template Tool 是免费的吗?

是的,Template Tool 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Template Tool 支持哪些平台?

Template Tool 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Template Tool?

由 BIN(@dinghaibin)开发并维护,当前版本 v1.0.0。

💬 留言讨论