← 返回 Skills 市场
209
总下载
2
收藏
0
当前安装
13
版本数
在 OpenClaw 中安装
/install version-master
功能描述
Intelligent single-file version management. Save, restore, diff, and clean file snapshots with per-file version history. Activate when users need version con...
安全使用建议
This skill appears to implement what it claims and does not ask for credentials, but it stores file snapshots in ~/.workbuddy/versions/version-master and exposes snapshots across workspaces. Before installing, consider: (1) Do you accept that versions (including binary content) are persisted outside the workspace in your home directory? (2) Do you want potentially sensitive files to be stored in a global location shared across projects? (3) Avoid allowing 'auto-detect' saves without explicit file paths; prefer to explicitly name files to save. If you need stronger isolation, run the tool in a sandboxed environment or modify the storage_path to a workspace-local directory. If you are unsure, review the full scripts/version_tool.py content in detail or run the code in a hermetic test workspace first.
功能分析
Type: OpenClaw Skill
Name: version-master
Version: 2.1.1
The Version-Master skill is a legitimate utility for local single-file version control. The implementation in `scripts/version_tool.py` includes proactive security measures, such as path traversal protection using `pathlib.Path.resolve()` and `relative_to()` to ensure file operations remain within the workspace. Destructive actions like `restore_version` and `clean_versions` require explicit user confirmation, and the skill includes a backup mechanism (`.version_backup/`) when restoring files. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力评估
Purpose & Capability
Name/description (single-file versioning: save, restore, diff, clean) align with the provided code and SKILL.md. The code implements expected behaviors (save_version, list_versions, restore_version, diff, clean) and the manifest does not request unrelated binaries or credentials.
Instruction Scope
Runtime instructions map to the included Python tool and show explicit call signatures. The SKILL.md allows AI 'auto-detection' of which file to save from context — this grants discretionary behavior to the agent and should be used carefully. Safety rules require explicit confirm=True for destructive ops; that is present in the docs and (partially) enforced by the API design.
Install Mechanism
There is no install spec and the skill is instruction + script files only. No external downloads, package installs, or remote code execution URLs are present in the bundle.
Credentials
The skill requires no environment variables or credentials, which is appropriate. However, it writes snapshot data into a global path under the user's home (~/.workbuddy/versions/version-master), meaning file contents are persisted outside the workspace — a privacy/data-protection consideration rather than a credentials mismatch.
Persistence & Privilege
Although the skill does not request elevated platform privileges and 'always' is false, it persists snapshots to the user's home and intentionally shares the storage across workspaces. This cross-workspace sharing can leak snapshots between projects; snapshots (including binary content) are stored long-term on disk. The skill does not modify other skills' configs, but the global storage footprint and cross-workspace accessibility are noteworthy.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install version-master - 安装完成后，直接呼叫该 Skill 的名称或使用
/version-master触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.1.1
Version 2.1.1 (no file changes detected):
- Version number updated to 2.1.1 in documentation.
- No other updates or code changes present in this release.
v2.1.0
Version 2.1.0 of version-master
- Updated description to emphasize intelligent version management and workspace-safe path handling.
- Refined keywords for more precise skill activation.
- Added explicit documentation of file path security: only allow file paths within the workspace; system-level paths are rejected.
- Documentation reorganized for conciseness and clarity. Core features and usage instructions remain unchanged.
- No changes to code or functionality; documentation update only.
v2.0.1
- Downgraded skill version to 2.0.1 (from 3.0.0), restoring previous documentation.
- Shortened and simplified the skill description and keywords for clarity and improved trigger coverage.
- No code or implementation changes; only documentation (SKILL.md) was updated.
- All core features, usage examples, and safety rules remain consistent with prior versions.
v2.0.0
Version 2.0.0 — Major internal overhaul and simplification.
- Migrated from a multi-directory, multi-class architecture to a streamlined setup focused around scripts/version_tool.py.
- Removed 21 files including business logic, config handling, database models, and infrastructure modules, significantly reducing complexity.
- Added usage reference and a single core script implementing all main functionality.
- All invocations are now routed through scripts/version_tool.py, clarifying and centralizing usage.
- Skill is now targeted at single-file version management with simplified install and usage instructions.
v1.0.8
Version 1.0.8 — Security improvements and better path safety.
- Trusted source management is now limited to protected, non-external methods.
- Path boundary checks added: `copy_directory` ensures destination stays within the storage root.
- Code files (e.g., .py, .js, .ts) are excluded from sensitive content scans to reduce false positives; embedded secrets in source code may be included in snapshots.
- Documentation updated to highlight these security changes and best practices for secret management.
v1.0.7
- Added support for optional environment variables for configuration, storage, limits, encryption, and logging.
- Expanded security section with details on restore integrity, file locking, hook strict mode, encryption, and data storage location.
- Clarified encryption requirements: disabled unless both `VERSIONMASTER_ENCRYPTION_PASSWORD` and `VERSIONMASTER_ENCRYPTION_SALT` are set.
- Updated to version 1.0.7.
v1.0.6
- Removed business/orchestration_service.py, infrastructure/confirmation_manager.py, nlp/intent_parser.py, and requirements-dev.txt.
- Updated documentation for a more concise, method-focused SKILL.md.
- Clarified that methods are invoked directly; intent parsing is handled externally.
- Removed event-driven and AI intent parser details from documentation.
- Streamlined available commands and examples for easier integration and usage.
v1.0.5
- Added requirements-dev.txt for development dependencies.
- SKILL.md now specifies activation_priority as "normal" instead of "high".
- Updated keywords and install sections in SKILL.md for improved clarity and package management.
- Workspace defaults clarified—snapshots are now always stored within the managed project's directory unless overridden.
- Security warnings added for encryption defaults to encourage production-safe configuration.
v1.0.4
- Added detailed configuration instructions, including environment variables and config file options.
- Documented default configuration structure and custom options for storage, logging, and security.
- No code changes; documentation (SKILL.md) updated to guide setup and customization.
- Retains all previous usage instructions and feature overviews.
v1.0.3
Version 1.0.3
- Added new file: infrastructure/encryption.py
- No changes to core functionality or user commands.
- Documentation (SKILL.md) remains unchanged in content.
v1.0.2
- Added config/default_config.json and requirements.txt for configuration and dependency management.
- Added infrastructure/confirmation_manager.py to enhance confirmation mechanisms.
- Removed infrastructure/encryption.py, streamlining infrastructure components.
- SKILL.md improved with quick installation instructions, cross-platform support details, activation priority, keyword metadata, and bilingual (Chinese/English) trigger/command examples.
v1.0.1
Version 1.0.1 – No file changes detected.
- No updates or modifications were made in this release.
- All features and documentation remain unchanged from the previous version.
v1.0.0
Initial release of version-master: an intelligent version management assistant for AI agents.
- Provides file snapshot saving, restoration, comparison, and cleanup features.
- Supports AI-powered naming, natural language references, and intelligent version selection.
- Optimizes storage with incremental snapshots and space management tools.
- Includes robust security with atomic operations, confirmation prompts, and operation logging.
- Features smart cleanup recommendations and advanced filtering for listing and searching versions.
元数据
常见问题
version-master 是什么？
Intelligent single-file version management. Save, restore, diff, and clean file snapshots with per-file version history. Activate when users need version con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 209 次。
如何安装 version-master？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install version-master」即可一键安装，无需额外配置。
version-master 是免费的吗？
是的，version-master 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
version-master 支持哪些平台？
version-master 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 version-master？
由 hanli（@neuhanli）开发并维护，当前版本 v2.1.1。
推荐 Skills