← 返回 Skills 市场
111
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install universal-autostart
功能描述
Cross-platform auto-start service manager for Windows and macOS. Supports installing, uninstalling, starting, stopping, and monitoring services with automati...
安全使用建议
This package implements a plausible auto-start/service manager and its install scripts will create system-level tasks (Windows: schtasks running as SYSTEM; macOS: launchd plist) which require admin rights — that part is expected. However: 1) The repository includes publish_textonly.py, which contains a hard-coded API key and an upload routine that will POST local files to an external SkillHub endpoint. That file is unrelated to running or installing services and could exfiltrate files if executed. Do NOT run any scripts you don't understand. 2) Before running install scripts as Administrator/sudo, inspect universal_service.py and the install scripts for any network calls or paths that reference sensitive directories. 3) Remove or sanitize publish_textonly.py (or at minimum the API key) if you plan to keep these files locally; do not run it unless you intend to publish. 4) Test in an isolated environment or VM first; avoid installing system-level tasks on production machines until you've verified behavior. If you want, I can point out the exact lines with the hard-coded key and the upload call and review the rest of universal_service.py for additional network or file access (the file was truncated in places).
功能分析
Type: OpenClaw Skill
Name: universal-autostart
Version: 1.0.0
The bundle provides cross-platform service persistence (autostart) on Windows and macOS using 'schtasks' and 'launchctl' via 'universal_service.py'. While these are high-risk capabilities, they align with the stated purpose of a service manager. However, the inclusion of 'publish_textonly.py' is highly irregular as it contains a hardcoded API key ('sk-skillhubs-JNpqszhN_oGF3u3xGEAMpJIjG6V2_etC') for the 'skillhub.club' platform, representing a significant security vulnerability (credential exposure). Additionally, the core logic allows for the execution of arbitrary commands defined in JSON configuration files, which could be abused if the configuration source is untrusted.
能力标签
能力评估
Purpose & Capability
The name, description, SKILL.md, and install scripts are consistent with a cross‑platform auto‑start/service manager and legitimately require python and admin privileges. However, the repository also contains publish_textonly.py which performs an unrelated network upload and embeds a hard-coded SKILLHUB API key — this credential and upload behavior are not required for the stated purpose and are unexplained.
Instruction Scope
The SKILL.md instructs administrative operations appropriate for installing services (creating system tasks / launchd plists). That scope is expected. The instructions do not tell the user to run publish_textonly.py, but that file exists and can transmit local skill files to an external endpoint; because it is present in the package it expands the security surface even if not mentioned in SKILL.md.
Install Mechanism
There is no install spec (instruction-only skill) and install scripts are local shell/batch scripts (install_macos.sh, uninstall_macos.sh, suggested install .bat). No remote downloads or archive extraction are used, which reduces supply-chain risk. The included files will be written to disk when the user unpacks or installs the skill; that's expected for an instruction-only package containing helper scripts.
Credentials
The skill declares no required environment variables, which is proportionate. But publish_textonly.py contains a hard-coded API key (SKILLHUB_API_KEY) and a SkillHub upload flow — a secret embedded in the package and an ability to POST local files to an external service are disproportionate and not justified by the service manager purpose. Also some operations (creating system tasks as SYSTEM on Windows) require elevated privileges — that's expected for a system-level auto-start manager, but you should be aware.
Persistence & Privilege
The skill does require and instruct elevated privileges for installation (installer scripts call sudo / ask to run as admin and the Windows task is created to run as SYSTEM). always:false is set (normal). Autonomous model invocation is allowed by default; combined with the ability to install system services this increases risk if the agent had unchecked autonomy, but that is a platform-level consideration rather than a defect in the skill itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install universal-autostart - 安装完成后，直接呼叫该 Skill 的名称或使用
/universal-autostart触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Universal-autostart v1.0.0
- Initial release of a cross-platform auto-start service manager for Windows and macOS.
- Supports installing, uninstalling, starting, stopping, and monitoring background services.
- Enables automatic restart of services on failure.
- Provides persistent service setup that survives system reboots using sc/schtasks (Windows) or launchd (macOS).
元数据
常见问题
universal-autostart 是什么？
Cross-platform auto-start service manager for Windows and macOS. Supports installing, uninstalling, starting, stopping, and monitoring services with automati... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 111 次。
如何安装 universal-autostart？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install universal-autostart」即可一键安装，无需额外配置。
universal-autostart 是免费的吗？
是的，universal-autostart 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
universal-autostart 支持哪些平台？
universal-autostart 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 universal-autostart？
由 steam2001（@ahao2001）开发并维护，当前版本 v1.0.0。
推荐 Skills