Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

CLI Anything Wrapper

v1.0.0

包装 CLI-Anything,让 OpenClaw 能调用任意软件的 CLI 功能

0· 69·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description claim to wrap CLI-Anything to control local software; the code enumerates supported apps, locates harnesses under ~/.openclaw/workspace/CLI-Anything, and executes harness scripts. Required resources (none) align with this purpose.
Instruction Scope
SKILL.md and run.py stay within the wrapper's purpose, listing/installing CLI-Anything and invoking harness executables. Note: runtime will execute arbitrary local harness scripts with user-supplied arguments (via subprocess.run). This is expected for a wrapper but increases risk if untrusted inputs or harnesses are present.
Install Mechanism
There is no external install spec, but run.py includes an --install action that clones https://github.com/HKUDS/CLI-Anything (GitHub) and attempts ./setup.sh or pip install -e. Using a GitHub repo is standard, but the install runs remote setup scripts (shell=True), which can execute arbitrary code from the cloned repo — review upstream code before running install.
Credentials
The skill declares no environment variables or credentials and the code only reads the user's home path for the workspace. It does not request unrelated secrets or access tokens.
Persistence & Privilege
always:false and no modifications to other skills or system-wide settings. The skill can be invoked autonomously (default), which is normal for skills; combine that with its ability to run local binaries when considering risk.
Assessment
This skill is coherent with its description: it discovers and runs CLI-Anything harness scripts and can clone the CLI-Anything repo. Before installing or running it, review and trust the upstream CLI-Anything repo and any harness contents (they will be executed locally). Prefer dry-run mode first, avoid passing untrusted inputs as --args, and do not run --install unless you are comfortable executing a remote setup.sh/pip install from that GitHub repository. If you need stricter safety, run the wrapper in a sandbox or VM and inspect harness scripts before allowing autonomous agent use.

Like a lobster shell, security has layers — review code before you run it.

automationvk9797kf2ah407czxfj8pb2kwex84fztwclivk9797kf2ah407czxfj8pb2kwex84fztwlatestvk9797kf2ah407czxfj8pb2kwex84fztwsoftwarevk9797kf2ah407czxfj8pb2kwex84fztwwrappervk9797kf2ah407czxfj8pb2kwex84fztw
69downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

CLI-Anything Wrapper

让 OpenClaw 可以调用 CLI-Anything 控制各种软件(GIMP、Blender、LibreOffice等)。

前置条件

  1. CLI-Anything 已安装
  2. Python 3.10+
  3. 目标软件已安装

使用方法

查看支持的软件

openclaw run cli-anything-wrapper --list
openclaw run cli-anything-wrapper --list --category AI

调用软件

openclaw run cli-anything-wrapper --app <软件名> --args "<参数>"

常用示例

# 图像处理 - GIMP
openclaw run cli-anything-wrapper --app gimp --args "photo.jpg --filter blur"

# 3D 渲染 - Blender
openclaw run cli-anything-wrapper --app blender --args "scene.blend --render"

# 文档转换 - LibreOffice
openclaw run cli-anything-wrapper --app libreoffice --args "doc.docx --pdf"

# AI 绘画 - ComfyUI
openclaw run cli-anything-wrapper --app comfyui --args "workflow.json"

# 本地模型 - Ollama
openclaw run cli-anything-wrapper --app ollama --args "run llama3.2"

其他选项

# 显示详细信息
openclaw run cli-anything-wrapper --info

# 安装 CLI-Anything
openclaw run cli-anything-wrapper --install

# 模拟运行(测试参数)
openclaw run cli-anything-wrapper --app gimp --args "test.jpg" --dry-run

# JSON 格式输出
openclaw run cli-anything-wrapper --list --json

支持的软件

软件类别描述
gimp设计图像编辑、滤镜
blender3D建模、渲染、动画
inkscape设计矢量图处理
libreoffice办公文档转换
audacity音视频音频编辑
obs音视频直播控制
comfyuiAIAI绘画工作流
ollamaAI本地大模型管理
kdenlive音视频视频剪辑
mermaid办公流程图生成
zotero学术文献管理

Comments

Loading comments...