Windows packag manager installer

install windows software and windows package manager environments. use when the user wants to install a windows application, explicitly wants to install or c...

This skill appears coherent for its goal, but be careful before running the commands it recommends: - Installing Chocolatey via the provided iex (DownloadString) pattern downloads and executes a remote script — verify the URL and trust the source before running it. This is the standard choco install flow, but it's inherently higher risk than purely local steps. - The skill suggests switching Chocolatey to a Tsinghua mirror; mirrors can be useful but you should confirm you trust that mirror and understand you are changing the package source for future installs/updates. - The skill favors a 'best-effort' install approach; ensure the agent asks you (or you ask) for explicit confirmation before performing privileged installs or running commands that require administrator access. Also verify package IDs returned by searches before executing install commands. If you want tighter control, ask the agent to only provide the commands and not execute them, or to always request your explicit confirmation before any privileged operation.

Type: OpenClaw Skill Name: windows-package-manager-installer Version: 1.0.0 The skill facilitates Windows software management by automating the installation of 'winget' and 'Chocolatey'. It employs high-risk execution patterns, specifically using 'Invoke-Expression' (iex) to run a remote PowerShell script from the Chocolatey community domain and modifying system-wide package sources to use the Tsinghua mirror (SKILL.md). While these actions are standard for the stated administrative purpose, the reliance on remote script execution and the redirection of package repositories represent significant security risks and potential supply chain attack surfaces.