Linux installer

v1.0.0

Installs, launches, and uninstalls Linux desktop apps by resolving the safest supported source first, then running a local helper CLI. Use when the user asks...

0· 92·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included code and catalog: the CLI resolves install candidates and runs package-manager commands. The helper reads a local OpenClaw config (~/.openclaw/openclaw.json) to check the unsafe-community setting, which is coherent with the documented opt-in behavior.
Instruction Scope
SKILL.md restricts actions to resolving candidates, asking for confirmation, and then running explicit install/uninstall/launch commands. The code implements validations and will call local package tools (flatpak, snap, apt/dnf/pacman/zypper, nix, aur helpers, wine) and may bootstrap tooling via sudo when confirmed — this matches the documentation. It does not instruct broad system scans or exfiltration.
Install Mechanism
No remote downloads or obscure install URLs: the intended install is 'pip install -e .' from the skill directory (setup.py is included). The skill is instruction-plus-code (console entry points) and does not pull arbitrary archives from unknown hosts during install. The runtime may execute package-manager network actions, but those are expected for installing OS packages.
Credentials
The skill declares no secrets or required env vars. It does read ~/.openclaw/openclaw.json (to honor unsafeCommunityInstalls) and expands environment variables in catalog entries. It will run sudo and system package commands when performing installs/uninstalls — this is proportionate to the purpose but requires giving those commands elevated privileges at runtime (user confirmation is required per the docs).
Persistence & Privilege
always is false and the skill does not request to be force-enabled. It only reads local config and the bundled catalog; there is no sign it modifies other skills or system configurations beyond performing package installs when explicitly confirmed by the user.
Assessment
This skill appears internally consistent for resolving and installing Linux desktop apps, but check these before you install/use it: 1) Inspect the bundled catalog.json for any apps you care about (it will run package-manager commands that install software with sudo). 2) The helper reads ~/.openclaw/openclaw.json to allow unreviewed installs if you opt in — do not enable unsafeCommunityInstalls unless you understand the risk. 3) Installing the helper requires running pip install -e . from your skills folder; review the code (main.py, validate_catalog.py, setup.py) if you don't trust the publisher. 4) When the helper bootstraps tooling it will run sudo apt/dnf/pacman/zypper commands and systemctl/ln as documented — expect to be prompted for your password. 5) Because the registry 'Source' and homepage are missing, prefer obtaining this skill from a known repository or verifying the code locally before pip-installing it.

Like a lobster shell, security has layers — review code before you run it.

latestvk9747dhxpnj84p3r9ryqa6mz0s83nmgm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments