← 返回 Skills 市场
132
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zlmediakit
功能描述
定期拉取 ZLMediaKit 仓库，查看最新的 Issue、Pull Request，并提供源码深度分析功能。当用户要求查看 ZLMediaKit 动态、Issue、PR 或分析其源码时触发调用。
安全使用建议
This skill appears to do what it says: clone/pull the public ZLMediaKit repository, query GitHub for issues/PRs, and generate a local Markdown report. Before installing or enabling autonomous runs, consider: 1) Confirm you are comfortable letting the agent write to the workspace path (default D:\.openclaw\workspace) or set WORKSPACE_DIR to a safe location. 2) The SKILL.md mentions git/gh/curl/grep — ensure those tools are present (gh is optional). 3) If you supply a GITHUB_TOKEN, treat it as a secret (it’s only used to raise GitHub API rate limits). 4) The registry metadata omits the listed tools and env usage — you may want the publisher to fix that metadata mismatch for clarity. 5) If you want extra caution, run the included python script manually to inspect its behavior before allowing the agent to invoke it autonomously.
功能分析
Type: OpenClaw Skill
Name: zlmediakit
Version: 1.0.0
The skill bundle is designed to automate the tracking and analysis of the ZLMediaKit open-source project. It uses standard tools like git and the GitHub CLI (or API) to synchronize source code and fetch recent issues and pull requests, as documented in SKILL.md and scripts/sync_and_analyze.py. While the Python script utilizes subprocess.run with shell=True and accesses the GITHUB_TOKEN environment variable, these actions are strictly scoped to the stated purpose of repository management and API authentication, with no evidence of data exfiltration, malicious persistence, or harmful prompt injection.
能力评估
Purpose & Capability
The skill's declared top-level requirements (none) differ from the SKILL.md metadata that lists required tools (git, gh, curl, grep). The actual behavior (git clone/pull, GitHub API calls, local code analysis) legitimately needs git and network access and optionally gh/curl, so the tools listed in SKILL.md are appropriate; the mismatch between registry metadata and SKILL.md is an inconsistency but not malicious.
Instruction Scope
Runtime instructions and the included Python script only clone/pull the public GitHub repo, query GitHub's API for issues/PRs, search the local source tree and write a Markdown report. The skill does not execute code from the cloned repo or call unknown external endpoints beyond api.github.com. It does reference an optional GITHUB_TOKEN and a local workspace path (D:\.openclaw\workspace).
Install Mechanism
No install spec is provided (instruction-only with an included helper script). No remote installs or archive extraction occur. Risk is low because code writes only to the declared workspace path and uses standard CLI tools.
Credentials
The skill does not require secrets, but SKILL.md and the script reference optional environment variables (GITHUB_TOKEN to avoid rate limits and WORKSPACE_DIR to override the workspace). These env vars are proportional to the task, but they are not declared in the skill registry metadata — a minor transparency gap.
Persistence & Privilege
The skill is not always: true, does not request elevated privileges, and only writes files into its workspace. It does not modify other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zlmediakit - 安装完成后，直接呼叫该 Skill 的名称或使用
/zlmediakit触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- 首次发布 zlmediakit-analyzer Skill。
- 支持定期跟踪 ZLMediaKit 最新 Issue/PR。
- 集成源码深度分析能力，支持模块实现细节追踪。
- 推荐工具链：git、gh CLI、curl、grep。
- 自动生成结构化 Markdown 报告并指出关键代码路径。
- 可配置为定时自动拉取并报告仓库动态。
元数据
常见问题
zlm 是什么？
定期拉取 ZLMediaKit 仓库，查看最新的 Issue、Pull Request，并提供源码深度分析功能。当用户要求查看 ZLMediaKit 动态、Issue、PR 或分析其源码时触发调用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 132 次。
如何安装 zlm？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zlmediakit」即可一键安装，无需额外配置。
zlm 是免费的吗？
是的，zlm 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
zlm 支持哪些平台？
zlm 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 zlm？
由 taylor（@feixintianxia）开发并维护，当前版本 v1.0.0。
推荐 Skills