← 返回 Skills 市场
94
总下载
2
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install tuhucar-knowledge-assistant
功能描述
Use when answering car maintenance, service interval, oil, brake fluid, tire pressure, or ownership questions through the TuhuCar CLI knowledge gateway.
安全使用建议
This skill is coherent and only delegates work to a local 'tuhucar' CLI which will make network requests to its configured endpoint. Before installing or using it: 1) verify you trust the tuhucar CLI package (inspect the GitHub repo and npm/brew package history); 2) confirm the binary you run is the official one (check checksums or installed path); 3) be cautious about TUHUCAR_ENDPOINT — do not set it to an untrusted server, since that would send your queries there; 4) review ~/.tuhucar/config.toml before initializing the config; and 5) when in doubt run commands with --dry-run and prefer the here-doc pattern shown to avoid shell-injection risks.
功能分析
Type: OpenClaw Skill
Name: tuhucar-knowledge-assistant
Version: 0.0.3
The skill is a legitimate wrapper for the TuhuCar CLI, designed to provide car maintenance information. It demonstrates security awareness by explicitly instructing the AI agent to use quoted heredocs (EOF) to prevent shell injection when handling user-provided text in SKILL.md and command-reference.md. No evidence of data exfiltration, malicious execution, or persistence was found.
能力评估
Purpose & Capability
The skill's name and description match the required binary ('tuhucar') and the SKILL.md instructs calling that CLI to answer car-maintenance questions. Required artifacts (CLI, optional config) are appropriate for the stated purpose.
Instruction Scope
SKILL.md stays on-topic: it instructs building a question, calling the CLI with --format json, parsing data.reply, reusing session_id only per conversation, and not persisting session state. It explicitly warns against interpolating raw user input into shell commands and against modifying ~/.tuhucar/config.toml without approval.
Install Mechanism
This is an instruction-only skill with no install spec or bundled code. It suggests installing the CLI via npm or brew if missing; those recommendations are normal and the skill itself does not download or execute code.
Credentials
The skill does not require credentials or config paths. It does reference the TUHUCAR_ENDPOINT env var (and suggests setting it if config is missing) which is reasonable for an HTTP gateway override — be aware that pointing that env var to an untrusted endpoint would route queries elsewhere.
Persistence & Privilege
The skill does not request always:true and does not ask to change other skills' configs. It recommends not persisting session_id across conversations and not modifying config without user approval.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tuhucar-knowledge-assistant - 安装完成后，直接呼叫该 Skill 的名称或使用
/tuhucar-knowledge-assistant触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.0.3
Address ClawHub security scan findings
v0.0.2
Initial ClawHub release
元数据
常见问题
TuhuCar Knowledge Assistant 是什么？
Use when answering car maintenance, service interval, oil, brake fluid, tire pressure, or ownership questions through the TuhuCar CLI knowledge gateway. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 94 次。
如何安装 TuhuCar Knowledge Assistant？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tuhucar-knowledge-assistant」即可一键安装，无需额外配置。
TuhuCar Knowledge Assistant 是免费的吗？
是的，TuhuCar Knowledge Assistant 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
TuhuCar Knowledge Assistant 支持哪些平台？
TuhuCar Knowledge Assistant 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TuhuCar Knowledge Assistant？
由 Fini（@finiking）开发并维护，当前版本 v0.0.3。
推荐 Skills