← 返回 Skills 市场
yuyonghao-123

Auto Optimizer

作者 yuyonghao-123 · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
182
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install yuyonghao-auto-optimizer
功能描述
自动监控、分析和优化OpenClaw技能性能,识别瓶颈并自动应用优化方案提升执行效率和稳定性。
安全使用建议
This package is inconsistent and risky: method names in SKILL.md, tests, and source don't line up (likely incomplete/broken), and the applier will write backups and modify other skills' source files under paths derived from HOME and a user-supplied skillPath. Before installing or enabling it: 1) review the full source locally (particularly src/applier.js) and ensure apply operations are safe and limited to intended directories; 2) run it in a sandbox or container and not on a production host; 3) require explicit confirmation and backups before allowing it to modify any code; 4) ask the author to fix the API/method-name mismatches and to add explicit safeguards (path validation, dry-run defaults, least-privileged behaviour); and 5) if you cannot audit the code, avoid granting it autonomous invocation or pointing it at repositories with sensitive credentials or production code.
功能分析
Type: OpenClaw Skill Name: yuyonghao-auto-optimizer Version: 0.1.0 The skill bundle implements an 'Auto Optimizer' that monitors and modifies other skills' source code. While the logic appears functional and includes a test suite, the 'OptimizationApplier' (src/applier.js) performs high-risk operations including recursive directory copying and prepending code to 'src/index.js' files without path sanitization. This capability for automated code modification and arbitrary file writes, while aligned with the stated purpose, represents a significant security risk and potential for unintended side effects or exploitation if the agent is directed toward sensitive system paths.
能力评估
Purpose & Capability
The stated purpose is performance monitoring and automatic optimization. The code attempts to implement that, but exports, class/method names, and behavior are inconsistent with the SKILL.md and tests. More importantly, the OptimizationApplier modifies arbitrary skill directories on disk (backing up to ~/.openclaw/backups and writing to <skillPath>/src/index.js). Modifying other skills' source code is a high-impact capability and should be clearly justified and restricted; the manifest and metadata do not surface this risk.
Instruction Scope
SKILL.md instructs callers to invoke optimizeSkill and supply a skillPath so the tool can apply changes. The code follows that model and will read/write files at the provided skillPath and create backups and metrics under the user's home directory. Additionally, the SKILL.md API surface (e.g., analyzeSkill, analyzeMultipleSkills, addRule) does not match method names implemented in the source (e.g., analyzer.analyze vs analyzer.analyzeSkill), meaning runtime behavior may not match docs. The instructions permit file modifications beyond monitoring and can be used to alter arbitrary local code.
Install Mechanism
There is no install spec (instruction-only on registry) but the package contains JavaScript source files. No network installs are declared. That lowers supply-chain install risk, but also means the skill will execute local JS code when invoked — including filesystem writes — rather than just calling an external API.
Credentials
The skill declares no required env vars, but the code reads process.env.HOME and process.env.USERPROFILE to build paths for metrics and backups. This is typical but not declared. No API keys are requested. However, the ability to write into user home paths and arbitrary provided skillPath is a powerful capability that is not reflected in the skill metadata.
Persistence & Privilege
always is false, which is appropriate. But the skill creates persistent files under ~/.openclaw (metrics and backups) and will modify other skills' source files. Autonomous invocation is allowed by default; combined with the ability to modify code on disk this increases blast radius if the skill is invoked without careful user oversight.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install yuyonghao-auto-optimizer
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /yuyonghao-auto-optimizer 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of Auto Optimizer for OpenClaw skills. - Real-time monitoring of execution time and resource usage. - Automatic bottleneck detection and code smell identification. - Generates actionable optimization suggestions based on analysis. - Supports auto-application of optimization plans to code. - Modular usage: includes performance monitor, bottleneck analyzer, optimization engine, and optimization applier as standalone or combined modules. - Detects common performance issues and applies strategies like caching, async processing, memory fixes, error handling, batching, and monitoring.
元数据
Slug yuyonghao-auto-optimizer
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Auto Optimizer 是什么?

自动监控、分析和优化OpenClaw技能性能,识别瓶颈并自动应用优化方案提升执行效率和稳定性。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 182 次。

如何安装 Auto Optimizer?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install yuyonghao-auto-optimizer」即可一键安装,无需额外配置。

Auto Optimizer 是免费的吗?

是的,Auto Optimizer 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Auto Optimizer 支持哪些平台?

Auto Optimizer 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Auto Optimizer?

由 yuyonghao-123(@yuyonghao-123)开发并维护,当前版本 v0.1.0。

💬 留言讨论