Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Openclaw Cn Installer

v1.0.1

OpenClaw 中文安装配置助手。一键检测环境、配置国产 AI 模型(DeepSeek/智谱/阿里通义)。适合中国用户快速上手 OpenClaw。

0· 218·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yang1002378395-cmyk/openclaw-cn-installer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Openclaw Cn Installer" (yang1002378395-cmyk/openclaw-cn-installer) from ClawHub.
Skill page: https://clawhub.ai/yang1002378395-cmyk/openclaw-cn-installer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-cn-installer

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-cn-installer
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Chinese installer for DeepSeek/智谱/阿里通义) align with the included files: environment checker, model setup (writes local .env and config.json), and connection tester that POSTs to the declared provider endpoints.
Instruction Scope
SKILL.md tells the agent to run the three included scripts and references only ~/.openclaw files and provider endpoints. The scripts only inspect the system environment, prompt for API keys, store them locally, and call provider APIs to test connectivity—no unrelated file reads or external endpoints beyond provider/platform URLs and the npm mirror check.
Install Mechanism
No install spec; this is instruction-plus-scripts only. Files are plain JS and package.json points to a GitHub repo. No downloads from untrusted URLs or archive extraction steps are present.
Credentials
The skill requests no environment variables from the platform, but it prompts users to enter provider API keys and stores them in plaintext at ~/.openclaw/.env and writes ~/.openclaw/config.json. This is expected for a local installer but users should be aware keys are stored locally and readable by any process with access to that path.
Persistence & Privilege
always is false and there is no attempt to modify other skills or system-wide agent settings. The skill creates/updates files only under the user's home ~/.openclaw directory, which is consistent with its role.
Assessment
This skill appears to do what it says: it checks your environment, prompts you for API keys for DeepSeek/智谱/阿里通义, saves them to ~/.openclaw/.env (plaintext), updates ~/.openclaw/config.json, and tests connections to the listed provider endpoints. Before installing: (1) confirm you trust the source (package.json repo URL) because the tool will store API keys locally; (2) ensure ~/.openclaw has appropriate filesystem permissions; (3) prefer creating limited-scope API keys and rotate them if you later distrust the tool; (4) you can inspect the three JS files yourself—there is no hidden network exfiltration in the code, only requests to the declared provider domains and an npm mirror check; (5) if you need stricter security, avoid entering high-privilege keys here or use environment-level secrets managers instead.
check-env.js:50
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cc6spm91pm66qwpntcvwx75838f1d
218downloads
0stars
2versions
Updated 22h ago
v1.0.1
MIT-0

OpenClaw 中文安装配置助手

专为中文用户设计的 OpenClaw 安装配置 Skill。配置国产 AI 模型,节省 99% API 费用。

功能

  • 🔍 环境检测 - 自动检测 Node.js、系统、网络环境
  • 🤖 国产模型配置 - 一键配置 DeepSeek、智谱 GLM、阿里通义千问
  • 连接测试 - 测试 API 连接,验证配置正确

安装

npx clawhub@latest install openclaw-cn-installer

使用方法

1. 环境检测

node ~/.openclaw/skills/openclaw-cn-installer/check-env.js

检测内容:

  • Node.js 版本(需要 18+)
  • 操作系统兼容性
  • 网络连接状态

2. 配置国产 AI 模型

# DeepSeek
node ~/.openclaw/skills/openclaw-cn-installer/setup-ai.js deepseek

# 智谱 GLM
node ~/.openclaw/skills/openclaw-cn-installer/setup-ai.js zhipu

# 阿里通义千问
node ~/.openclaw/skills/openclaw-cn-installer/setup-ai.js qwen

3. 测试连接

node ~/.openclaw/skills/openclaw-cn-installer/test-connection.js

输出示例:

✅ DeepSeek API: 连接成功
✅ 响应时间: 234ms
✅ 余额: ¥45.00

支持的 AI 模型

模型提供商特点推荐场景
DeepSeek V3DeepSeek超高性价比 ¥0.27/M tokens日常对话、代码生成
GLM-4智谱 AI中文能力强中文内容创作
Qwen 2.5阿里云多模态支持图文混合任务

价格对比

模型输入价格输出价格相比 GPT-4
DeepSeek V3¥0.27/M¥1.08/M便宜 100x
GLM-4¥0.1/M¥0.1/M便宜 50x
Qwen 2.5¥0.3/M¥0.6/M便宜 30x
GPT-4o¥35/M¥105/M基准

省钱技巧:用 DeepSeek 做日常任务,省 99% API 费用。

常见问题

Q: 如何获取 DeepSeek API Key?

  1. 访问 https://platform.deepseek.com
  2. 注册账号(支持手机号)
  3. 充值(最低 ¥10)
  4. 创建 API Key

Q: OpenClaw 配置文件在哪?

~/.openclaw/config.json       # 主配置
~/.openclaw/.env              # 环境变量(API Keys)
~/.openclaw/workspace/        # 工作目录

技术支持

更新日志

v1.0.1 (2026-03-20)

  • 🐛 修复文档与实际功能不匹配的问题
  • ✅ 移除未实现的功能说明

v1.0.0 (2026-03-20)

  • ✨ 首次发布
  • ✅ 支持 DeepSeek/GLM/Qwen 配置
  • ✅ 环境检测功能
  • ✅ 连接测试功能

License

MIT-0

Comments

Loading comments...