skill-python-env

【OpenClaw 内部工具 skill】为其他 skill 提供 Python 虚拟环境管理。按 Python 版本号在 ~/.python_env/<version> 下创建共享环境，多个 skill 可复用同一版本环境。自动安装 uv（若未安装）。不直接面向用户。

Security Scan

The skill's code and instructions match its stated purpose: it creates per-version shared Python virtualenvs under ~/.python_env, auto-installs the 'uv' tool from astral.sh if missing, and installs requested packages; it's internally coherent but has expected risks around network installers and shared environments.

Purpose & Capability

Name/description say: manage shared Python environments per-version and auto-install uv. The scripts and SKILL.md implement exactly that (create ~/.python_env/<version>, call uv venv, install packages). No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

Runtime instructions and scripts operate only on user home paths (~/.python_env and ~/.local/bin), PATH, and network downloads for installers/Python. They do not read other system files or unrelated credentials. However, caller-provided package names are installed into a shared environment, which means one skill can cause arbitrary packages to be installed and thus affect other skills that reuse the same env.

Install Mechanism

No packaged install spec — the scripts may download and execute remote installer scripts (curl|sh on Unix, irm|iex on PowerShell) from https://astral.sh (uv's upstream). The upstream domain is expected for uv but piping remote scripts to shell/PowerShell is higher-risk behavior by nature and should be considered before allowing automatic installs.

Credentials

The skill requests no environment variables or credentials (proportionate). One practical risk: environments are shared across skills, so installing packages (including unpinned/third-party packages) can create cross-skill dependency/typosquatting risks — this is a design tradeoff rather than an incoherence.

Persistence & Privilege

The skill writes persistent files into the user's home (~/.python_env, possibly ~/.local/bin) but does not request elevated/system-wide privileges or use always:true. Its persistence is limited to the invoking user's profile and is consistent with its purpose.

Assessment

This skill appears to do what it says, but be aware of two practical risks before installing: (1) it auto-downloads and executes the uv installer from the network (curl|sh or PowerShell irm|iex); verify you trust https://astral.sh or install uv manually to avoid remote-exec risk, and (2) it creates shared per-version environments and will install caller-specified packages into them — a malicious or compromised calling skill could request installation of a malicious PyPI package that then affects other skills. To mitigate: restrict which skills can invoke this helper, prefer pinned package names/versions, review package arguments passed by callers, or disable the auto-install path and install uv and Python manually.

内部工具 skill — 本 skill 不直接响应用户指令，由其他需要 Python 环境的 skill 在执行时调用。

设计原则

• 按版本共享：环境以 Python 版本号命名（~/.python_env/3.11），不同 skill 只要版本相同即复用同一环境，避免重复创建
• 幂等安全：环境已存在则秒返回，包安装使用 uv pip install（已安装的包自动跳过）
• 零前置依赖：uv 未安装时自动下载安装，安装完毕后继续执行，无需用户手动干预

目录结构

skill-python-env/
├── SKILL.md
├── _meta.json
└── scripts/
    ├── ensure_python_env.sh    # Shell 版（供 bash/zsh/Git Bash 调用）
    └── ensure_python_env.py    # Python 版（供 uv run 或 python3 调用）

调用接口

两个脚本功能完全相同，根据调用方语言选择。

Shell 版

bash ~/.openclaw/skills/skill-python-env/scripts/ensure_python_env.sh <python_version> [packages...]

参数	说明
python_version	必填，如 3.11、3.12
packages...	可选，追加安装的包，空格分隔

Python 版（uv run）

uv run ~/.openclaw/skills/skill-python-env/scripts/ensure_python_env.py <python_version> [--packages pkg1 pkg2 ...]

参数	说明
python_version	必填，如 3.11、3.12
--packages	可选，追加安装的包

输出格式

脚本运行完成后，stdout 末尾输出以下机器可读行，供调用方 grep 解析：

PYTHON_ENV_ACTIVATE:/home/user/.python_env/3.11/bin/activate
PYTHON_ENV_DIR:/home/user/.python_env/3.11
PYTHON_ENV_VERSION:3.11

其他 skill 集成示例

方式 A：直接激活后运行（Shell）

#!/usr/bin/env bash
# 其他 skill 的入口脚本

SKILL_ENV="$HOME/.openclaw/skills/skill-python-env/scripts/ensure_python_env.sh"

# 确保 Python 3.11 环境就绪，并安装本 skill 所需的包
bash "$SKILL_ENV" 3.11 requests httpx

# 激活并执行
source "$HOME/.python_env/3.11/bin/activate"
python -m my_skill "$@"

方式 B：解析输出路径（更健壮）

#!/usr/bin/env bash
SKILL_ENV="$HOME/.openclaw/skills/skill-python-env/scripts/ensure_python_env.sh"

OUTPUT=$(bash "$SKILL_ENV" 3.11 requests 2>&1)
echo "$OUTPUT"

ACTIVATE=$(echo "$OUTPUT" | grep '^PYTHON_ENV_ACTIVATE:' | cut -d: -f2-)
source "$ACTIVATE"
python -m my_skill "$@"

方式 C：Python 调用

import subprocess, os
from pathlib import Path

script = Path.home() / ".openclaw/skills/skill-python-env/scripts/ensure_python_env.py"
result = subprocess.run(
    ["uv", "run", str(script), "3.11", "--packages", "requests"],
    capture_output=True, text=True
)
# 解析激活路径（仅用于参考，Python 脚本通常直接 import）
activate = next(
    line.split(":", 1)[1] for line in result.stdout.splitlines()
    if line.startswith("PYTHON_ENV_ACTIVATE:")
)

环境路径规范

平台	激活命令
Linux / macOS	source ~/.python_env/3.11/bin/activate
Windows (Git Bash)	source ~/.python_env/3.11/Scripts/activate
Windows (PowerShell)	& "$env:USERPROFILE\.python_env\3.11\Scripts\Activate.ps1"

uv 自动安装

平台	安装方式	安装路径
Linux / macOS	curl / wget 管道 sh	~/.local/bin/uv
Windows	PowerShell irm	%USERPROFILE%\.local\bin\uv.exe

安装成功后脚本会提示将对应目录加入 PATH 以永久生效。

常见问题

Q: 想重置某个版本的环境 删除目录后重新调用即可自动重建：

rm -rf ~/.python_env/3.11
bash ensure_python_env.sh 3.11

Q: uv 找不到指定的 Python 版本 uv 会自动从官方源下载对应版本的 Python，需要网络可访问 python.org。

Q: Windows PowerShell 执行策略报错 以管理员身份运行：Set-ExecutionPolicy -Scope CurrentUser RemoteSigned