← 返回 Skills 市场
soroyue

Tool Permission Manager

作者 Simon Lau · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
353
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tool-permission-manager
功能描述
工具分级授权 - 细粒度管理每个工具的使用权限
使用说明 (SKILL.md)

Tool Permission Manager - 工具权限管理器

功能

对每个工具进行细粒度授权管理,控制谁能使用什么工具。

权限等级

1. 公开(Public)

无需确认,直接使用

工具 说明
read 读取文件
web_search 网络搜索
笔记相关 读写笔记

2. 警告(Warning)

使用前显示警告

工具 说明
exec 执行命令
write 写入文件

3. 审批(Approval)

使用前需确认

工具 说明
message 发送消息
cron 定时任务
sessions 会话管理

4. 禁止(Forbidden)

不可使用

工具 说明
gateway 网关配置
delete 删除文件

权限配置

{
  "public": ["read", "web_search"],
  "warning": ["exec", "write"],
  "approval": ["message", "cron"],
  "forbidden": ["gateway", "delete"]
}

使用方式

自动根据工具类型判断权限等级。 用户可通过"授权XXX工具"动态调整权限。

安全使用建议
This skill is a short, coherent policy that maps specific tool names to permission levels and does not request credentials or install code. Before installing, ask the author: (1) how are permission changes enforced and persisted (is there a config file or platform API used?), (2) where are changes logged and who can review/audit them, (3) how does it interact with platform-enforced forbidden tools (e.g., will it actually prevent use of gateway/delete or just suggest it), and (4) can you provide more precise rules for ambiguous tools. If you rely on this for security, test it in a safe environment and require explicit confirmation for any actions that might enable powerful tools (exec, write, delete, gateway).
功能分析
Type: OpenClaw Skill Name: tool-permission-manager Version: 1.0.0 The skill bundle defines a conceptual framework for managing tool permissions within the OpenClaw environment. The SKILL.md file categorizes various agent capabilities (such as exec, write, and cron) into risk levels (Public, Warning, Approval, Forbidden) to guide the agent's behavior. No executable code or malicious instructions were found; the content is entirely focused on security categorization and authorization logic.
能力评估
Purpose & Capability
Name/description (tool permission management) match the SKILL.md contents. The declared requirements (no env vars, no binaries, no install) are appropriate for a purely instructional policy.
Instruction Scope
SKILL.md provides a simple mapping of tools to four permission levels and says the agent should auto-classify tools and allow user commands like “授权XXX工具” to change permissions. The instructions are high-level and do not direct the agent to read unrelated files, credentials, or external endpoints, but they are vague about how decisions are made, logged, or enforced.
Install Mechanism
No install spec and no code files — lowest-risk delivery. The skill will not write new binaries or download archives.
Credentials
The skill requests no environment variables, credentials, or config paths; the declared requirements are minimal and proportionate to an instruction-only policy.
Persistence & Privilege
always is false and autonomous invocation is allowed (the platform default). The SKILL.md implies the agent can change tool permissions dynamically, but it does not describe persistence, audit, or how those changes interact with platform-level enforcement — this is a behavioral/design ambiguity rather than a direct privilege request.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tool-permission-manager
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tool-permission-manager 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
工具分级授权管理
元数据
Slug tool-permission-manager
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Tool Permission Manager 是什么?

工具分级授权 - 细粒度管理每个工具的使用权限. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 353 次。

如何安装 Tool Permission Manager?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tool-permission-manager」即可一键安装,无需额外配置。

Tool Permission Manager 是免费的吗?

是的,Tool Permission Manager 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Tool Permission Manager 支持哪些平台?

Tool Permission Manager 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Tool Permission Manager?

由 Simon Lau(@soroyue)开发并维护,当前版本 v1.0.0。

💬 留言讨论