← 返回 Skills 市场
Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat
作者
Juguangyuan
· GitHub ↗
· v1.0.0
347
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install yuzhua
功能描述
Install, start, stop, and health-check Yuzhua (gesture + voice + OpenClaw gateway) with minimal manual setup.
安全使用建议
This skill is coherent for installing and running a local Yuzhua app, but it clones and executes code from a remote GitHub repository without verifying a commit/tag or signature. Before running: (1) inspect the repository (and the repo's start.sh) to ensure it does what you expect; (2) avoid placing real secrets in .env unless you trust the upstream code; (3) prefer setting YUZHUA_REPO_URL to a vetted fork or a specific commit/tag; (4) run the install/start in a restricted environment (container or VM) if you want to limit risk; (5) ensure git, curl, and lsof are available and review output during install/start. If you cannot review the upstream repo, treat this as higher risk.
功能分析
Type: OpenClaw Skill
Name: yuzhua
Version: 1.0.0
The skill bundle is designed to install and manage the 'Yuzhua' project by cloning its repository from GitHub and executing its local scripts. The primary security concern lies in scripts/install.sh and scripts/start.sh, which download and execute code from an external source (https://github.com/juguangyuan520-dotcom/Yuzhua.git) without any integrity checks or sandboxing. While this behavior is consistent with the skill's stated purpose, the execution of unverified remote scripts constitutes a significant supply-chain risk and a potential vector for remote code execution.
能力评估
Purpose & Capability
Name/description match the provided scripts and SKILL.md. The skill only implements install, start, stop, and health-check behaviour for a local Yuzhua project and uses expected options (YUZHUA_HOME, YUZHUA_REPO_URL, YUZHUA_API_URL, YUZHUA_PORT). No unrelated credentials or services are requested.
Instruction Scope
SKILL.md and scripts stay within the stated scope: install.sh clones/updates the repo and prepares .env, start.sh execs the project's own start.sh, health_check.sh queries a local HTTP status endpoint, and stop.sh kills processes on the configured port. One important note: start.sh execs the upstream project's start.sh (i.e., arbitrary code from the cloned repo will run), which is outside the skill's own review surface.
Install Mechanism
There is no packaged installer; install.sh clones from a GitHub repo (https://github.com/juguangyuan520-dotcom/Yuzhua.git). Using git+GitHub is common, but the script clones/updates and then relies on the repo's start.sh without verifying commit, tag, or signature. That creates a risk if the remote repo is malicious or compromised.
Credentials
The skill declares no required credentials and only uses optional environment variables for paths, repo URL, API URL, and port. The scripts create a local .env from .env.example when present; this is reasonable for local configuration. There is no built-in exfiltration of .env in the skill itself, but the upstream project's code (run by start.sh) could access or transmit secrets in .env.
Persistence & Privilege
The skill does not request elevated platform privileges, does not set always:true, and does not modify other skills or global agent configs. It performs actions only under the configured YUZHUA_HOME path.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install yuzhua - 安装完成后，直接呼叫该 Skill 的名称或使用
/yuzhua触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of yuzhua-openclaw skill, providing easy local setup and management for Yuzhua (gesture + voice AI) via OpenClaw gateway.
- Install, start, stop, and health-check Yuzhua with simple bash scripts.
- Supports open/close hand gesture triggers for local voice-driven AI conversations.
- Connects conversation routing through OpenClaw gateway, without modifying OpenClaw core processes.
- All speech processing (recognition, VAD, TTS) runs locally.
- Environment variables and simple customization for paths and repo URLs.
- Scripts automate project setup, startup, status checking, and shutdown.
元数据
常见问题
Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat 是什么？
Install, start, stop, and health-check Yuzhua (gesture + voice + OpenClaw gateway) with minimal manual setup. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 347 次。
如何安装 Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yuzhua」即可一键安装，无需额外配置。
Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat 是免费的吗？
是的，Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat 完全免费（开源免费），可自由下载、安装和使用。
Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat 支持哪些平台？
Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Yuzhua (驭爪) - Gesture-Controlled OpenClaw Chat？
由 Juguangyuan（@juguangyuan520-dotcom）开发并维护，当前版本 v1.0.0。
推荐 Skills