← 返回 Skills 市场
basher83

VibeTunnel

作者 basher83 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1952
总下载
0
收藏
4
当前安装
1
版本数
在 OpenClaw 中安装
/install vibetunnel
功能描述
Manage VibeTunnel terminal sessions. Create, list, monitor, and control terminal sessions visible in the VibeTunnel web dashboard.
安全使用建议
This skill is coherent with its stated purpose, but you should: (1) confirm VT_URL points only to servers you trust (pointing to a remote/production host gives the skill the ability to execute arbitrary commands there); (2) inspect the npm package and the GitHub repository before installing the 'vibetunnel' CLI and prefer installing in an isolated environment if you must; (3) ensure the VibeTunnel server has authentication, is on a trusted network, and that you understand what commands the agent may ask to run; (4) note the minor mismatch that the SKILL.md uses curl/jq while metadata advertises a vibetunnel binary — check whether you actually need to install that CLI.
功能分析
Type: OpenClaw Skill Name: vibetunnel Version: 1.0.0 The skill exposes high-risk capabilities by allowing the creation of new terminal sessions with arbitrary commands and sending arbitrary input to existing sessions via the VibeTunnel API, as detailed in SKILL.md. While this functionality is central to the skill's stated purpose of managing terminal sessions, it presents a significant risk for arbitrary code execution if the agent is prompted maliciously. There is no direct evidence of intentional malicious behavior such as data exfiltration or persistence within the skill's definition itself.
能力评估
Purpose & Capability
The name, description, and SKILL.md consistently describe managing VibeTunnel terminal sessions via the REST API. The SKILL.md uses curl and jq for all examples (both declared as required binaries). The metadata and install spec also advertise an npm 'vibetunnel' package and require a 'vibetunnel' binary — the README never invokes that binary. This is a small inconsistency (CLI advertised but not used in the instructions) but plausible (the package may provide a convenience CLI).
Instruction Scope
SKILL.md instructs only API calls to VT_URL (default localhost) using curl/jq; it does not reference unrelated files, other env vars, or unexpected endpoints. However, the documented operations intentionally allow creating sessions that run arbitrary commands and set working directories on the target host — this is expected for a terminal-session manager but is powerful: the skill (when pointed at a server) can cause arbitrary command execution there.
Install Mechanism
Install is an npm package named 'vibetunnel' that creates a 'vibetunnel' binary. npm installs are a common, moderate-risk mechanism (they write code to disk). The SKILL.md examples do not require the CLI to function, so installing the package appears optional for the documented REST usage. Verify the npm package provenance and contents before installing.
Credentials
Only VT_URL is declared as primaryEnv and used in SKILL.md. That is appropriate for a service client. One important operational note: VT_URL can point to a remote server, so granting the skill access to a VT_URL you don't control effectively gives it the ability to run commands on that server — verify and restrict where VT_URL points and ensure server-side authentication/authorization is in place.
Persistence & Privilege
The skill does not request permanent/global presence (always:false), does not declare config paths, and does not attempt to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but is not combined with unusual privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install vibetunnel
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /vibetunnel 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: pure SKILL.md with curl-based REST API patterns for VibeTunnel session management
元数据
Slug vibetunnel
版本 1.0.0
许可证
累计安装 4
当前安装数 4
历史版本数 1
常见问题

VibeTunnel 是什么?

Manage VibeTunnel terminal sessions. Create, list, monitor, and control terminal sessions visible in the VibeTunnel web dashboard. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1952 次。

如何安装 VibeTunnel?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install vibetunnel」即可一键安装,无需额外配置。

VibeTunnel 是免费的吗?

是的,VibeTunnel 完全免费(开源免费),可自由下载、安装和使用。

VibeTunnel 支持哪些平台?

VibeTunnel 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 VibeTunnel?

由 basher83(@basher83)开发并维护,当前版本 v1.0.0。

💬 留言讨论