← 返回 Skills 市场
umami-setup
作者
Erwan Lee Pesle
· GitHub ↗
· v1.0.0
444
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install umami-setup
功能描述
Add Umami self-hosted analytics to any website with adblocker-proof proxy. Covers: creating the website in Umami, setting up a same-domain proxy (Next.js, As...
安全使用建议
This is a how-to guide you will follow manually. Before proceeding: ensure the Umami instance you use is trusted; run the provided curl commands in a secure terminal (they require admin username/password and will return a sensitive bearer token); avoid pasting credentials into third-party or shared consoles; deploy the reverse proxy with HTTPS and limit direct exposure of the Umami backend (bind to localhost or restrict by firewall); verify Host header handling and CORS on your proxy so you don't accidentally forward internal hostnames or auth headers; test changes in a staging environment first and confirm pageviews while using an adblocker. If you prefer automation, consider creating limited-scope API credentials rather than using the Umami admin account where possible.
功能分析
Type: OpenClaw Skill
Name: umami-setup
Version: 1.0.0
The skill instructs the agent to execute `curl` commands against user-provided domains (`<UMAMI_HOST>`, `<YOUR_DOMAIN>`) and to parse JSON output using `python3 -c` (SKILL.md). While these actions are part of the skill's stated purpose (Umami setup), they introduce significant vulnerability risks, such as potential Server-Side Request Forgery (SSRF), credential exposure to malicious endpoints, or shell injection if user-controlled input to `python3 -c` is not properly sanitized. There is no evidence of intentional malicious behavior, but the capabilities are high-risk.
能力评估
Purpose & Capability
The README-style SKILL.md describes creating a website in Umami and configuring same-domain proxy rewrites for Next.js/Astro/Vercel/Caddy/Nginx. All required capabilities (Umami instance, Umami admin credentials, and access to the website codebase) are consistent with the described functionality. The skill does not request unrelated cloud credentials or binaries.
Instruction Scope
Instructions are explicit and limited to actions necessary for the task: performing the Umami API login, creating a website via the API, configuring proxy rewrites/reverse-proxy rules, and verifying tracking. The instructions do not instruct reading unrelated system files or transmitting data to third-party endpoints beyond the Umami host and the user's domain.
Install Mechanism
This is instruction-only with no install spec and no code files; nothing is written to disk or fetched automatically, which minimizes install-time risk.
Credentials
The skill does not declare required env vars, but its steps require Umami admin credentials and knowledge of the Umami host and website codebase — these are expected and proportional. These credentials are sensitive (they produce bearer tokens used to create websites); the user should avoid sharing them and run commands in a trusted environment.
Persistence & Privilege
always:false and no install actions mean the skill does not persist or request elevated platform privileges. It will not be permanently present or modify other skills/configurations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install umami-setup - 安装完成后，直接呼叫该 Skill 的名称或使用
/umami-setup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial: Umami self-hosted analytics setup with adblocker-proof proxy
元数据
常见问题
umami-setup 是什么？
Add Umami self-hosted analytics to any website with adblocker-proof proxy. Covers: creating the website in Umami, setting up a same-domain proxy (Next.js, As... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 444 次。
如何安装 umami-setup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install umami-setup」即可一键安装，无需额外配置。
umami-setup 是免费的吗？
是的，umami-setup 完全免费（开源免费），可自由下载、安装和使用。
umami-setup 支持哪些平台？
umami-setup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 umami-setup？
由 Erwan Lee Pesle（@superworldsavior）开发并维护，当前版本 v1.0.0。
推荐 Skills