← 返回 Skills 市场
lunrenyi

Mirror Source Manager

作者 lunrenyi · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
236
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install x-mirror
功能描述
x-mirror is a comprehensive mirror source management tool for various package managers. Use this skill whenever users need to configure, switch, or query pac...
安全使用建议
This skill appears to do what it says (manage package mirrors) and asks for no secrets, but installing the underlying x-cmd runtime can be risky if you choose the one-line auto-installer. Prefer the Homebrew path (signed bottles) or the manual download+review option. Never run curl -fsSL https://get.x-cmd.com | sh on a machine with sensitive data or long-lived credentials. If you plan to install, review the install script at get.x-cmd.com and verify referenced checksums and release artifacts (and be cautious about any unfamiliar domains such as conda.prefix.dev). If you want the agent to perform installation, require explicit consent and prefer Homebrew/manual-review over the auto-install option.
功能分析
Type: OpenClaw Skill Name: x-mirror Version: 1.0.0 The x-mirror skill is a management tool for package manager mirrors (npm, pip, brew, etc.) that interfaces with the x-cmd utility. While it references a high-risk installation method (curl|sh), the documentation in data/install.md is exceptionally transparent, categorizing risks and providing explicit instructions for the AI agent to seek user consent and avoid automatic installation in sensitive environments. No evidence of data exfiltration, obfuscation, or malicious intent was found; the skill follows responsible security practices for a CLI-based tool.
能力评估
Purpose & Capability
The SKILL.md describes mirror management for many package managers and all runtime instructions call the x-cmd loader and x mirror subcommands. Requiring the x-cmd runtime (~/.x-cmd.root/X) and providing installation guidance is consistent with the stated purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions stay on-topic (listing/setting/restoring mirrors). The SKILL.md instructs the agent to source ~/.x-cmd.root/X and, if not present, to offer installation options. It does not ask the agent to read unrelated files or environment variables. However, the included installation guidance explicitly permits the agent to download and run remote install scripts (with user consent), which expands runtime behavior to executing network-fetched code — this is documented but worth flagging.
Install Mechanism
The skill is instruction-only (no package install spec), but data/install.md promotes three install paths: Homebrew (recommended, low risk), a manual download+review (medium risk), and an auto-install curl -fsSL https://get.x-cmd.com | sh (high risk). The auto-install pattern (pipe to sh) is inherently risky. The guide also references binaries from GitHub releases (normal) and packages from an unusual domain (https://conda.prefix.dev), which should be verified. Although the doc recommends verification and Homebrew, the presence of a one-line remote-exec install is the primary risk.
Credentials
The skill declares no required environment variables, no credentials, and no special config paths. The install scope is user-local (~/.x-cmd.root/) and claims no sudo required. That is proportionate for a CLI helper. Note: running the networked installer in an environment containing secrets is warned against in the doc.
Persistence & Privilege
The skill is not always-included, and it does not request elevated privileges. Installation is user-local and self-contained. The included agent workflow instructs the agent to ask the user before installing, which limits autonomous high-privilege actions. There is no instruction to modify other skills or system-wide settings beyond adding files under ~/.x-cmd.root/ and shell sourcing.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install x-mirror
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /x-mirror 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of x-mirror: a mirror source management tool for multiple package managers. - Supports configuration, switching, and querying of mirrors for pip, npm, brew, apt, go, cargo, gem, and more. - Enables listing available mirrors, viewing current configuration, restoring defaults, and optimizing download speeds. - Especially suitable for developers in China or those needing faster package downloads. - Compatible with POSIX Shell (sh/bash/zsh/dash/ash). - Command examples and supported managers included in documentation.
元数据
Slug x-mirror
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Mirror Source Manager 是什么?

x-mirror is a comprehensive mirror source management tool for various package managers. Use this skill whenever users need to configure, switch, or query pac... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 236 次。

如何安装 Mirror Source Manager?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install x-mirror」即可一键安装,无需额外配置。

Mirror Source Manager 是免费的吗?

是的,Mirror Source Manager 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Mirror Source Manager 支持哪些平台?

Mirror Source Manager 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Mirror Source Manager?

由 lunrenyi(@lunrenyi)开发并维护,当前版本 v1.0.0。

💬 留言讨论