← 返回 Skills 市场
bytesagain1

Turbine

作者 bytesagain1 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
178
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install turbine
功能描述
Turbine performance calculator
安全使用建议
This skill appears coherent and runs only a local shell script that stores data under ~/.turbine (or a directory you set via TURBINE_DIR). Before installing: 1) Review the script if you plan to store sensitive data — it stores plaintext JSONL and config entries and does not escape user input (quotes could break JSON). 2) Back up or inspect ~/.turbine if you care about data retention. 3) Note sed -i and other utilities may behave slightly differently on some platforms (e.g., macOS); test in your environment. 4) The skill makes no network calls and asks for no credentials, but only install/use it if you trust the source repository.
功能分析
Type: OpenClaw Skill Name: turbine Version: 1.0.0 The skill is classified as suspicious due to a shell injection vulnerability in the 'config' command within 'scripts/script.sh', where unsanitized user input is passed directly to a 'sed' command. Additionally, there is a functional discrepancy between the stated purpose in 'SKILL.md' (a turbine performance calculator) and the actual implementation in 'scripts/script.sh', which only provides basic string logging and key-value storage without any calculation logic. No evidence of intentional data exfiltration or malicious backdoors was found.
能力评估
Purpose & Capability
Name/description match the contained script and SKILL.md. The script implements add/list/search/export/stats/config and stores data in ~/.turbine (or TURBINE_DIR), which is coherent with a local performance calculator.
Instruction Scope
SKILL.md tells the agent to run scripts/script.sh commands. The script only performs local filesystem operations (create dir, read/write data.jsonl, config.txt, exports) and prints to stdout; it does not access external network endpoints or unrelated system paths.
Install Mechanism
There is no install spec — this is instruction-only plus an included shell script. No downloads or package installs occur, so the installation surface is minimal.
Credentials
No required environment variables or credentials are declared. The script respects an optional TURBINE_DIR override; otherwise it uses the user HOME directory. No secrets appear to be requested or needed.
Persistence & Privilege
The skill does not request permanent/always-on privilege, does not modify other skills or system agent settings, and confines writes to its own data directory.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install turbine
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /turbine 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
publish v1.0.0
元数据
Slug turbine
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Turbine 是什么?

Turbine performance calculator. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 178 次。

如何安装 Turbine?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install turbine」即可一键安装,无需额外配置。

Turbine 是免费的吗?

是的,Turbine 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Turbine 支持哪些平台?

Turbine 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Turbine?

由 bytesagain1(@bytesagain1)开发并维护,当前版本 v1.0.0。

💬 留言讨论