ClawHub

1panel-install

v0.1.0

1Panel 服务器管理面板一键安装。当用户提到安装、部署、配置 1Panel 时激活。自动检测是否已安装，已安装则返回访问信息，未安装则自动完成安装流程。

⭐ 1· 242·0 current·0 all-time
by@jack-liang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is named and described as a one‑click installer for 1Panel and its code and runtime instructions only require bash, curl, tar, and systemctl and operate on /opt and the workspace — all consistent with installing a system service like 1Panel.
✓
Instruction Scope
SKILL.md and install.sh stick to installation tasks: detect 1Panel, download a release tarball, extract, run the bundled install.sh with automated answers, wait for systemd service, and call 1pctl user-info. The scripts require root and may read/write /opt, /usr/bin, /root/.openclaw/workspace and systemd units — these are expected for installing a system service and not out-of-scope data collection or exfiltration.
ℹ
Install Mechanism
There is no package/install spec in the registry; the included install.sh downloads a tarball from https://resource.fit2cloud.com and extracts/executes the bundled installer. Network download-and-extract of upstream installer is normal for this use but is the highest-risk step (runs third-party code fetched at runtime). The URL is not a URL shortener or an IP and appears plausible, but users should verify the upstream source and checksum before running on production systems.
✓
Credentials
The skill requests no environment variables or external credentials. It does require root privileges to install system services, which is proportionate to its functionality.
✓
Persistence & Privilege
always is false and the skill does not request persistent agent-level privileges. The installer modifies system paths (/opt, /usr/bin) and systemd units as expected for installing a service, but it does not modify other skills or global agent configs.
Assessment
This skill appears to do exactly what it says: download the 1Panel release, run the upstream installer, and return access info. Before running it on any production host: 1) review the install.sh and verify the download URL (resource.fit2cloud.com) and ideally a checksum or signature for the tarball; 2) run initially in a disposable VM or staging system; 3) be aware it requires root and will install binaries and systemd services under /opt and /usr/bin; 4) after installation, immediately change the generated panel password and lock down firewall/security groups; 5) if you have concerns about running remote installers, fetch the upstream archive manually, inspect its contents, then run the installer interactively rather than letting the skill automate the whole flow.

Like a lobster shell, security has layers — review code before you run it.

latestvk974jzf7ndyy377rwafatgvzq982tp23

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖥️ Clawdis
Binsbash, curl, tar, systemctl

Comments