Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Openclaw Setup Service

v1.0.1

OpenClaw安装配置服务 - 帮用户安装、配置、优化OpenClaw AI助手,提供技能安装、个性化定制、企业部署一条龙服务

0· 96·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lover876/jarvis-setup-service.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Openclaw Setup Service" (lover876/jarvis-setup-service) from ClawHub.
Skill page: https://clawhub.ai/lover876/jarvis-setup-service
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install jarvis-setup-service

ClawHub CLI

Package manager switcher

npx clawhub@latest install jarvis-setup-service
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description claim an OpenClaw install/config service and the repository includes installer, config, and Telegram setup scripts that perform those tasks. The required artifacts (apt, Node.js, pnpm, openclaw npm package) are coherent with installing OpenClaw. Minor issues: duplicate 'telegram' blocks in one example config and small formatting inconsistencies, but these look like bugs rather than intentional misdirection.
Instruction Scope
SKILL.md and scripts instruct the agent/user to run system-level install commands (apt, curl|bash NodeSource setup, npm/pnpm global installs) and to collect credentials such as Telegram Bot Token and server login (root). The scripts store bot tokens and admin IDs directly into ~/.openclaw/config.yaml (plaintext). They do not contain obvious exfiltration endpoints or network calls beyond package manager downloads and the NodeSource setup script.
Install Mechanism
No install spec in registry; installation is via included shell scripts. Scripts use curl -fsSL https://deb.nodesource.com/setup_20.x | bash - (standard but executes remote script), apt installs, npm/pnpm global installs and pnpm add -g openclaw (fetches from npm registry). These are typical for this purpose but inherently require trusting external package sources (NodeSource and npm). The README suggests git clone from a GitHub repo (expected).
Credentials
The skill declares no required env vars, which matches metadata. However runtime prompts request sensitive inputs (server login/root access, Telegram Bot Token, admin chat ID). Storing tokens in ~/.openclaw/config.yaml in plaintext is convenient but increases risk. Asking for root/server credentials is proportionate to doing a remote install but requires the user to take extra care.
Persistence & Privilege
The skill does not set always:true and will not be force-included. Install scripts create files under the user's home (~/.openclaw) and may install global npm packages; this is expected for an installer. The skill does not attempt to modify other skills or global agent settings beyond its own config files.
Assessment
This package appears to do what it says (install and configure OpenClaw), but take standard precautions before running installer scripts on a production system: - Review the scripts line-by-line (install.sh, config.sh, setup-telegram.sh) before executing. - The installer runs apt and executes a remote NodeSource setup script via curl|bash and installs global npm/pnpm packages (trusting NodeSource and the npm registry). If you are concerned, inspect the NodeSource script and the 'openclaw' npm package source first. - Do not hand over long-term root passwords or private keys; prefer a temporary sudo account or isolated VM/container for installation and testing. - Telegram Bot Token and admin IDs are stored plaintext in ~/.openclaw/config.yaml; treat that file as sensitive (restrict permissions) or store secrets in a safer secret manager. - If possible, run the installer in a disposable VM or container first to validate behavior, and verify network calls from the machine during install. - If you will engage with the listed paid service, verify the provider identity separately (the repo/author links are generic) and avoid sending credentials over insecure channels.

Like a lobster shell, security has layers — review code before you run it.

latestvk979q8yjfh8zbbffdcsc8qvwfs83h67e
96downloads
0stars
2versions
Updated 1mo ago
v1.0.1
MIT-0

🔧 OpenClaw 安装服务 v1.0

帮你在服务器或电脑上安装配置OpenClaw AI助手


💡 服务介绍

我们能做什么

服务类型内容价格
基础安装服务器环境搭建 + OpenClaw安装¥199
标准配置安装 + 基础技能 + 频道对接¥399
高级定制全套配置 + 定制技能 + 培训¥999
企业版私有部署 + API对接 + 7x24支持¥5000+

📦 服务详情

基础安装 ¥199

  • 服务器环境检测
  • OpenClaw安装
  • 基本运行验证
  • 简单使用指导

标准配置 ¥399

  • 基础安装全部内容
  • Telegram/微信等频道对接
  • 常用技能安装(10+)
  • 个性化配置
  • 7天售后

高级定制 ¥999

  • 标准配置全部内容
  • 行业定制技能开发
  • 工作流自动化
  • 1对1使用培训
  • 30天售后

企业版 ¥5000+

  • 私有化部署
  • 多用户管理
  • API接口开发
  • 定制功能开发
  • 专属客服
  • 7x24支持

🛠️ 服务流程

第一步:需求沟通

确认:
- 服务器配置
- 使用场景
- 期望功能
- 预算范围

第二步:方案制定

提供:
- 服务清单
- 报价单
- 交付时间
- 售后说明

第三步:实施交付

执行:
- 环境搭建
- 安装配置
- 功能测试
- 交付文档

第四步:验收售后

确认:
- 功能正常
- 使用培训
- 售后对接

💰 支付方式

方式说明
支付宝扫码支付
微信扫码支付
对公转账企业用户

📋 交付清单

基础安装交付

✓ 安装完成截图
✓ 使用文档
✓ 登录信息
✓ 联系方式

高级定制交付

✓ 全部基础交付内容
✓ 定制技能包
✓ 操作视频教程
✓ 定期巡检服务

🔒 售后保障

服务类型售后周期
基础安装3天
标准配置7天
高级定制30天
企业版1年起

售后内容

  • 远程协助排障
  • 配置调整
  • 问题咨询
  • 优先更新

📊 常见问题

Q: 需要提供什么信息? A: 服务器登录信息(root权限)、期望使用的频道

Q: 安装需要多久? A: 基础安装约30分钟,高级定制1-3天

Q: 支持退款吗? A: 安装前可退,安装后不可退款


📞 联系方式

方式信息
微信扫码联系
备注OpenClaw安装服务

⚠️ 服务说明

  1. 远程操作需您授权
  2. 服务器数据需自行备份
  3. 部分功能需要API密钥
  4. 价格不含服务器费用

🎯 适用人群

人群需求
创业者快速拥有AI助手
企业降本增效
技术小白不想折腾
开发者快速搭建环境

服务即交付,售后有保障

Comments

Loading comments...