← 返回 Skills 市场
Trusted ClawHub Install Gate
作者
Zakhar Pashkin
· GitHub ↗
· v0.2.0
· MIT-0
34
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install trusted-clawhub-install-gate
功能描述
Audit a local OpenClaw or ClawHub skill directory before installation, classify it as PASS, REVIEW, or BLOCK, and optionally run the clawhub-install-gate CLI...
使用说明 (SKILL.md)
Trusted ClawHub Install Gate
Use this skill when a user wants to inspect a local skill artifact before install.
Workflow:
- Run
clawhub-install-gate inspect \x3Cpath>first. - Explain the findings.
- Do not install on
BLOCK. - Only install on
REVIEWafter explicit user approval. - Use
clawhub-install-gate verify \x3Cinstalled-path>after install when requested. - Use
clawhub-install-gate usagewhen the user asks to track install or REVIEW override usage on this machine.
Review policy:
- Treat the verdict as an Auto-review-style boundary decision, not a permission grant.
BLOCKcovers private-data transmission, secret-store probing, broad security weakening, denial circumvention, and destructive actions.- If a risky action is denied, do not route around it; choose a materially safer path or stop for user decision.
安全使用建议
This appears safe to use as a review helper if you trust the local clawhub-install-gate CLI. Before installing any reviewed skill, read the PASS/REVIEW/BLOCK explanation and only approve REVIEW installs when you understand the risk.
功能分析
Type: OpenClaw Skill
Name: trusted-clawhub-install-gate
Version: 0.2.0
The skill bundle describes a security auditing tool designed to inspect and verify local OpenClaw skills before installation. The instructions in SKILL.md and agents/openai.yaml focus on defensive workflows, such as blocking artifacts flagged as high-risk and requiring user approval for reviewed items. No malicious code, exfiltration logic, or harmful prompt injections are present in the provided files.
能力评估
Purpose & Capability
The stated purpose is to inspect local skill directories and optionally install them after review; that is coherent with the commands described, but installation is a high-impact action users should approve deliberately.
Instruction Scope
The workflow is bounded: inspect first, explain findings, do not install BLOCK results, and require explicit approval for REVIEW installs.
Install Mechanism
The skill is instruction-only and requires a pre-existing local binary, clawhub-install-gate. The binary itself is not included in the artifacts, so its provenance is outside this review.
Credentials
The documented actions are limited to user-provided local skill paths, installed paths for verification, and local usage tracking on request.
Persistence & Privilege
No background persistence or autonomous long-running behavior is shown. Optional receipts and usage tracking are disclosed and user-requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trusted-clawhub-install-gate - 安装完成后，直接呼叫该 Skill 的名称或使用
/trusted-clawhub-install-gate触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.0
Add Auto-review-aligned blocks and local receipt usage tracking.
元数据
常见问题
Trusted ClawHub Install Gate 是什么？
Audit a local OpenClaw or ClawHub skill directory before installation, classify it as PASS, REVIEW, or BLOCK, and optionally run the clawhub-install-gate CLI... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 34 次。
如何安装 Trusted ClawHub Install Gate？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trusted-clawhub-install-gate」即可一键安装，无需额外配置。
Trusted ClawHub Install Gate 是免费的吗？
是的，Trusted ClawHub Install Gate 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Trusted ClawHub Install Gate 支持哪些平台？
Trusted ClawHub Install Gate 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Trusted ClawHub Install Gate？
由 Zakhar Pashkin（@zack-dev-cm）开发并维护，当前版本 v0.2.0。
推荐 Skills