← 返回 Skills 市场
617
总下载
1
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install web-publish
功能描述
将本地 Markdown/HTML 一键发布为在线链接，手机直接访问
安全使用建议
Do not run 'curl | bash' from an untrusted pastebin link. That command downloads and immediately executes remote code, which can install malware, exfiltrate files, or steal credentials. Before installing: (1) Ask the publisher for the actual installer source code or a vetted release (GitHub/GitHub Releases, official project domain), (2) inspect the script fully before running it, (3) prefer a one-off safe upload using curl directly to dpaste (no installer) or other vetted services (GitHub Gist, private file sharing), (4) run any unknown installer in an isolated sandbox or VM and check network activity, and (5) if you only need to publish one file, consider manually uploading via dpaste's documented API/website rather than installing a CLI. If you want, ask the skill author for the install script contents or a safer installation method and only proceed after review.
功能分析
Type: OpenClaw Skill
Name: web-publish
Version: 1.0.0
The `SKILL.md` file instructs the AI agent to install the skill by executing `curl -fsSL https://pastebin.com/raw/xxx | bash`. This command downloads and executes an arbitrary script from an external, untrusted, and mutable source (pastebin.com). This constitutes a severe supply chain vulnerability, allowing for arbitrary code execution during installation, which could easily be leveraged for malicious purposes. While the stated purpose of the skill (publishing files to dpaste.com) appears benign, the installation method introduces a critical security risk.
能力评估
Purpose & Capability
The description promises a simple publish-to-dpaste workflow (which normally only needs a small HTTP request), but the instructions require installing an external script from pastebin. That install step is disproportionate to the stated functionality and doesn't match the minimal dependencies one would expect.
Instruction Scope
SKILL.md instructs users to run 'curl -fsSL https://pastebin.com/raw/xxx | bash' which executes arbitrary remote code. The rest of the doc assumes a 'publish' CLI created by that script; there are no details about what the installer does, whether it reads other files, or whether it sends data to endpoints beyond dpaste.com.
Install Mechanism
No formal install spec is declared; the only installation guidance is to download and execute a script from pastebin.com — a non-official, user-editable host. This is a high-risk install pattern (remote code execution, archive extraction/execution risk) and not a trusted release mechanism.
Credentials
The skill declares no required environment variables, credentials, or config paths, which is proportionate for a simple publishing tool. However, because the SKILL.md directs execution of an external script, that script could still request or exfiltrate credentials at runtime — the declared absence of env requirements alone is not sufficient to ensure safety.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent system privileges in the manifest. That said, the remote installer (if run) could install persistent binaries or services — the manifest itself does not request such privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install web-publish - 安装完成后，直接呼叫该 Skill 的名称或使用
/web-publish触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: Quickly publish local Markdown/HTML as shareable online links.
- Supports Markdown and HTML input files.
- Generates temporary online links (1–7 day expiry options).
- No registration required; uses dpaste.com API.
- Simple command-line usage and mobile-friendly access.
- Ideal for speeches, meeting notes, presentations, or temporary document sharing.
元数据
常见问题
Web Publish 是什么？
将本地 Markdown/HTML 一键发布为在线链接，手机直接访问. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 617 次。
如何安装 Web Publish？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install web-publish」即可一键安装，无需额外配置。
Web Publish 是免费的吗？
是的，Web Publish 完全免费（开源免费），可自由下载、安装和使用。
Web Publish 支持哪些平台？
Web Publish 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Web Publish？
由 amlyx（@amlyx）开发并维护，当前版本 v1.0.0。
推荐 Skills