← 返回 Skills 市场
81
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install xiwu-inventory
功能描述
家居物品库存管理，支持查询、添加、消耗、修改物品，库存预警和购买建议上下文输出
安全使用建议
This skill is coherent for managing a local inventory via a CLI, but it may automatically install a global npm package ('xiwu-niangzi') if the xiwu binary is missing. Before installing: (1) verify the npm package name and publisher (inspect the package on the npm registry or install manually), (2) consider manually installing the CLI yourself so you control the install, (3) be aware the skill will access inventory data stored under ~/.xiwu/xiwu.db via the xiwu CLI, and (4) Cron triggers will run the xiwu queries automatically. If you are uncomfortable with automatic global installs or an unknown npm package, decline automatic install and install/inspect the CLI manually.
功能分析
Type: OpenClaw Skill
Name: xiwu-inventory
Version: 1.1.0
The skill manages home inventory by wrapping the 'xiwu-niangzi' CLI tool via the 'shell' tool. It includes an auto-installation routine in SKILL.md that executes 'npm install -g', which is a high-risk behavior involving global system modification and remote code execution. Furthermore, the skill constructs shell commands using user-provided input (e.g., 'xiwu add "<name>"'), which presents a potential shell injection vulnerability if the agent fails to sanitize inputs. While these actions are aligned with the stated purpose, the high-privilege capabilities warrant a suspicious classification.
能力评估
Purpose & Capability
The name/description describe local inventory management and all declared requirements (a local 'xiwu' CLI) and the SKILL.md operations (search, add, update, remove, list, stocktake) match that purpose. Requesting the xiwu binary is expected for this capability.
Instruction Scope
Instructions constrain the agent to call the local 'xiwu' CLI with --json and to follow explicit confirmation and prompting rules. The only out-of-scope behavior is the runtime global install step (using pnpm/npm) if the CLI is missing; that step downloads code from the npm registry and modifies the system via a global install, which is a side-effect worth surfacing to the user.
Install Mechanism
The skill has no registry install spec but instructs at runtime to install a global npm package 'xiwu-niangzi' via pnpm/npm if 'xiwu' is absent. Installing a globally published npm package involves network fetch and executing code from an external registry. The package owner/publishing origin is not provided in the skill, so the runtime install is a moderate risk and should be verified by the user before allowing automatic installation.
Credentials
The skill does not request environment variables or unrelated credentials. It relies on a local CLI that stores data in ~/.xiwu/xiwu.db—access to that database is mediated by the xiwu CLI, which is reasonable for an inventory manager.
Persistence & Privilege
The skill is not forced-always and does not request elevated platform privileges. It can be invoked autonomously (platform default) and supports Cron-triggered queries that run without interactive user input; users should be aware scheduled runs will execute local xiwu queries automatically. The notable privilege is the ability to perform a global npm install at first run (a system-modifying action).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xiwu-inventory - 安装完成后，直接呼叫该 Skill 的名称或使用
/xiwu-inventory触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
新增 CLI 自动安装：xiwu 命令不存在时自动检测并安装
v1.0.0
初始发布：库存查询、增删改、过期预警、购买建议上下文
元数据
常见问题
Xiwu Inventory 是什么？
家居物品库存管理，支持查询、添加、消耗、修改物品，库存预警和购买建议上下文输出. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 81 次。
如何安装 Xiwu Inventory？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xiwu-inventory」即可一键安装，无需额外配置。
Xiwu Inventory 是免费的吗？
是的，Xiwu Inventory 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Xiwu Inventory 支持哪些平台？
Xiwu Inventory 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Xiwu Inventory？
由 johnqxu（@johnqxu）开发并维护，当前版本 v1.1.0。
推荐 Skills