Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

1Panel API Skills

v1.0.0

1Panel 开源面板 API Skill。提供网站管理、容器管理、数据库管理、文件管理等 23+ 个模块的完整 API 接口文档。

0· 125·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for breadbot86/1panel-api.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "1Panel API Skills" (breadbot86/1panel-api) from ClawHub.
Skill page: https://clawhub.ai/breadbot86/1panel-api
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install 1panel-api

ClawHub CLI

Package manager switcher

npx clawhub@latest install 1panel-api
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (1Panel API docs) match the provided content: extensive per-module API documentation for websites, containers, databases, files, backups, etc. Nothing in the package requires unrelated capabilities (no unexpected cloud credentials, binaries, or installs).
Instruction Scope
SKILL.md and the docs contain curl examples and a token-generation snippet (openssl + date) and list server file paths (e.g., /opt/1panel/...). These are typical for an API docs skill. The instructions do not direct reading unrelated local files or exfiltrating data, but do include shell examples that an agent might execute if invoked — exercise caution before running those commands.
Install Mechanism
No install spec and no code files — instruction-only. Nothing will be downloaded or written to disk by default, which minimizes install-time risk.
Credentials
The skill does not declare required env vars or credentials in the registry metadata. Runtime usage expects the user's 1Panel address and an API key (provided interactively or in requests), which is proportionate to the documented functionality. There are no unexpected credential requests.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request elevated or persistent platform privileges. Nothing indicates it would modify other skills or system-wide agent settings.
Assessment
This skill is a documentation bundle for the 1Panel management API and appears coherent. Before using it: (1) only provide your 1Panel API key and panel address to trusted skills/agents; prefer a limited-scope API key (if 1Panel supports it) for automation; (2) be careful executing the provided shell examples (openssl, curl) — they will run on the host/environment if an agent executes them; (3) the API covers destructive actions (delete containers, backups, databases, etc.), so review and restrict which endpoints you allow the agent to call; (4) if you want persistent configuration, store the API key in a secure place (secret manager) rather than pasting it into chat. Overall the package is consistent with its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk971f58ht4ktybqac2pznf4aes83xde2
125downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0

1Panel API Skills

🎯 一键管理你的 1Panel 服务器

快速开始

首次配置

首次使用本 Skill 时,请提供以下信息:

信息说明示例
1Panel 地址服务器 IP 或域名 + 端口http://192.168.1.100:8888
API Key在面板「设置」→「API 密钥」中生成你的密钥

获取 API Key

  1. 登录 1Panel 面板
  2. 进入「设置」→「API 密钥」
  3. 点击「创建」生成新密钥
  4. 复制生成的密钥

功能模块

模块说明
Apps应用商店、已安装应用管理
Websites网站创建、配置、反向代理、SSL
ContainersDocker 容器管理
DatabasesMySQL、PostgreSQL、Redis、MongoDB
Files文件上传、下载、压缩、解压
Backups备份与恢复
Cronjobs定时任务
RuntimesPHP、Node、Python、Go、Java 运行环境
Hosts主机监控、防火墙、SSH、磁盘管理
Settings系统配置、用户管理

认证方式

# Token 计算方式
api_key="你的API密钥"
timestamp=$(date +%s)
token=$(echo -n "1panel${api_key}${timestamp}" | openssl md5 | awk '{print $2}')

# 请求示例
curl -X GET "http://你的地址:8888/api/v2/containers/list" \
  -H "1Panel-Token: $token" \
  -H "1Panel-Timestamp: $timestamp" \
  -H "Content-Type: application/json"

了解更多

Comments

Loading comments...