← 返回 Skills 市场
lovelcp

Zhuaxia

作者 kissrain · GitHub ↗ · v0.4.1 · MIT-0
cross-platform ⚠ suspicious
410
总下载
0
收藏
1
当前安装
5
版本数
在 OpenClaw 中安装
/install zhuaxia
功能描述
Export and import OpenClaw instances as portable .claw packages for backup, sharing, and migration. Use when: user wants to back up, share, migrate, or resto...
安全使用建议
Things to consider before installing: - The skill will read files under ~/.openclaw (IDENTITY.md, config, workspace) and search common folders for .claw files. This is consistent with backup/import, but the SKILL.md says these reads happen 'silently' before asking — if you don't want that, don't allow the skill to run until you've reviewed it. - The instructions call an external command 'clawhub' (and reference clawctl usage) but the skill metadata only declares node as required. Confirm that 'clawhub' is present on your system or understand what will happen when that command is missing. - Review scripts/clawctl.mjs yourself (or run it in an isolated sandbox) to verify there are no network exfiltration calls, that credential-stripping works as claimed, and that backups are created where you expect. - If you plan to share .claw files, inspect a generated package in a safe environment and verify secrets were removed before distributing. - If unsure, run the tool manually from a terminal (node scripts/clawctl.mjs --help) rather than allowing autonomous agent invocation, and consider running it on a disposable VM or container first.
功能分析
Type: OpenClaw Skill Name: zhuaxia Version: 0.4.1 The 'zhuaxia' skill bundle provides legitimate utility for exporting, importing, and backing up OpenClaw instances. The core logic in `scripts/clawctl.mjs` includes robust security measures, such as a credential sanitizer that uses regex patterns and Shannon entropy to detect and strip API keys (OpenAI, Anthropic, etc.) before export. It also implements a mandatory exclusion list (`MANDATORY_FILE_EXCLUSIONS`) to prevent the accidental packaging of sensitive directories like `~/.ssh`, `credentials/`, or `sessions/`. The `SKILL.md` instructions are well-structured, emphasizing user confirmation, dry-runs, and automatic safety backups before performing destructive operations, with no evidence of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The claimed purpose (export/import OpenClaw instances) matches the included CLI script and file operations. Required binary 'node' is reasonable. However, the SKILL.md instructs running 'clawhub list' (and references clawctl for rollback) even though 'clawhub' (or clawctl as a separate binary) is not declared as a required binary — a minor incoherence.
Instruction Scope
The SKILL.md explicitly tells the agent to 'silently gather' local data (ls ~/.openclaw/workspace/, cat IDENTITY.md, check ~/.openclaw/openclaw.json, search common folders for .claw files) before asking the user. Reading these user files is plausible for export/import, but doing so without asking is scope creep and a privacy risk. The instructions also run an external tool ('clawhub') not declared in requirements.
Install Mechanism
There is no network install spec and no downloads; the skill ships a local Node script (scripts/clawctl.mjs) and expects node on PATH, which is proportionate. No extract-from-URL or third-party package install step was specified in registry metadata.
Credentials
The skill does not request environment variables or credentials. It does read files under ~/.openclaw (workspace, IDENTITY.md, config), which is consistent with backing up an OpenClaw instance, but users should be aware those files can contain sensitive information despite claims of automatic stripping.
Persistence & Privilege
The skill is not always: true and does not request elevated or system-wide configuration changes. It creates backups under ~/.openclaw/.zhuaxia-backups/ (expected for its purpose) and does not appear to modify other skills' configs per the provided instructions.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install zhuaxia
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /zhuaxia 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.4.1
zhuaxia 0.4.1 changelog - Added a _meta.json metadata file for the skill. - No functional changes to workflows or CLI usage.
v0.4.0
Bundle user-installed skills into .claw packages; auto-install on import with version-aware skip; show bundled skills in dry-run
v0.3.0
Add auto-backup before import, rollback support, manual backup, and backup listing
v0.2.0
Add AI agent behavior guide: smart defaults, conflict detection, auto config merge, skill dependency install, credential checklist
v0.1.0
Initial release: export/import OpenClaw instances as .claw packages
元数据
Slug zhuaxia
版本 0.4.1
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 5
常见问题

Zhuaxia 是什么?

Export and import OpenClaw instances as portable .claw packages for backup, sharing, and migration. Use when: user wants to back up, share, migrate, or resto... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 410 次。

如何安装 Zhuaxia?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install zhuaxia」即可一键安装,无需额外配置。

Zhuaxia 是免费的吗?

是的,Zhuaxia 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Zhuaxia 支持哪些平台?

Zhuaxia 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Zhuaxia?

由 kissrain(@lovelcp)开发并维护,当前版本 v0.4.1。

💬 留言讨论