Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Openclaw Quick Deploy

v1.0.0

Deploy OpenClaw quickly to VPS, Docker, or local with auto environment detection, dependency installation, config generation, and service startup in 5-7 minu...

0· 32·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sky-lv/openclaw-quick-deploy.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Openclaw Quick Deploy" (sky-lv/openclaw-quick-deploy) from ClawHub.
Skill page: https://clawhub.ai/sky-lv/openclaw-quick-deploy
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-quick-deploy

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-quick-deploy
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the instructions: steps for deploying OpenClaw to VPS/Docker/local are present and use expected tools (git, npm, docker). Minor inconsistencies exist: SKILL.md metadata (slug/version/author) differs from registry metadata; a Docker image name contains a likely typo ('sky lv/openclaw' with a space) and some links point to third-party repos (SKY-lv). These differences are not evidence of malicious intent but do not fully align with tidy packaging.
!
Instruction Scope
Instructions include running a remote script via curl | bash (raw.githubusercontent.com) and commands that read/modify system paths (e.g., /etc/*, ~/.openclaw, /root/.openclaw). The deploy script's OS detection is inconsistent with later commands (it detects /etc/redhat-release for CentOS but then uses apt-get unconditionally), and the script assumes privilege level (runs apt-get and global npm installs) without using sudo. While these actions are within the general scope of a deploy helper, executing remote scripts and the privilege assumptions are risky and should be reviewed.
!
Install Mechanism
This is an instruction-only skill (no install spec), which limits direct disk writes from the skill bundle. However the recommended 'one-click' install is a curl https://raw.githubusercontent.com/... | bash pattern — running code fetched from a remote raw URL is high risk because it executes unverified code on the host. Pulling a Docker image is expected, but the image name in docs appears malformed; verify the correct image (likely skylv/openclaw).
Credentials
The skill declares no required environment variables or credentials, which is proportionate for a deploy helper. The runtime instructions do require network access and likely root privileges for package installation and service enablement; these are reasonable for a deploy workflow but users should be aware that the script will modify system packages, install global npm packages, and write configuration under home/root directories.
Persistence & Privilege
The skill does not request 'always' presence, does not modify other skills, and only suggests enabling the OpenClaw gateway service (system autostart) which is expected behavior for a deployment. Autonomous invocation is allowed by platform default but not in itself a concern here.
What to consider before installing
This skill appears to be a legitimate deployment helper but contains risky and sloppy elements you should verify before running anything. Do not run the curl | bash command blindly; instead fetch the script (curl -fsSL URL -o deploy.sh) and inspect it for unexpected behaviour (backdoors, data exfiltration, extra network calls). Confirm the Docker image name (the SKILL.md has a space — likely 'skylv/openclaw') and verify the image/author on Docker Hub. Note the deploy.sh has OS-detection but then uses apt-get unconditionally — it may fail or do the wrong thing on CentOS; run in a test VM or container first. Ensure you run installation commands with appropriate privileges (use sudo or run as root intentionally), and verify the npm package 'openclaw' is the official project before installing globally. If you have sensitive data on the host, prefer manual inspection or a controlled sandboxed environment rather than one‑line remote installs.

Like a lobster shell, security has layers — review code before you run it.

latestvk9722hwybbdkkpdrxdnvecvte585ngpx
32downloads
0stars
1versions
Updated 9h ago
v1.0.0
MIT-0

OpenClaw Quick Deploy — 一键部署助手

功能说明

5 分钟快速部署 OpenClaw 到 VPS、Docker 或本地环境。自动检测系统环境、安装依赖、生成配置文件,让 OpenClaw 开箱即用。

支持平台

平台支持状态部署时间
Ubuntu 20.04/22.04✅ 原生支持5 分钟
Debian 11/12✅ 原生支持5 分钟
CentOS 7/8✅ 原生支持7 分钟
Docker✅ 容器化部署3 分钟
macOS✅ Homebrew 安装5 分钟
Windows (WSL2)✅ WSL2 部署7 分钟

快速开始

方式一:VPS 一键部署(推荐)

# Ubuntu/Debian/CentOS
curl -fsSL https://raw.githubusercontent.com/SKY-lv/awesome-openclaw-skills/main/scripts/deploy.sh | bash

# 部署完成后
openclaw gateway status

方式二:Docker 部署

# 拉取镜像
docker pull sky lv/openclaw:latest

# 运行容器
docker run -d \
  --name openclaw \
  -p 8080:8080 \
  -v ~/.openclaw:/root/.openclaw \
  -e OPENCLAW_CONFIG=/root/.openclaw/config.json \
  skylv/openclaw:latest

# 查看日志
docker logs -f openclaw

方式三:本地开发环境

# Node.js 环境(v18+  required)
git clone https://github.com/openclaw/openclaw.git
cd openclaw
npm install
npx openclaw gateway start

# 验证安装
openclaw gateway status

部署流程

1. 环境检测

checks:
  - nodejs: ">=18.0.0"
  - npm: ">=9.0.0"
  - git: installed
  - disk_space: ">=1GB free"
  - memory: ">=512MB free"
  - ports: "8080 available"

2. 依赖安装

dependencies:
  - openclaw (core)
  - openclaw-gateway (daemon)
  - openclaw-cli (command line)
  - optional: playwright (browser automation)
  - optional: puppeteer (headless Chrome)

3. 配置生成

config:
  - gateway.port: 8080
  - gateway.host: 0.0.0.0
  - session.timeout: 3600s
  - log.level: info
  - plugins: []

4. 服务启动

# 启动 Gateway
openclaw gateway start

# 设置开机自启
openclaw gateway enable

# 验证状态
openclaw gateway status

环境要求

最低配置

  • CPU: 1 核
  • 内存:512MB
  • 磁盘:1GB
  • 系统:Ubuntu 20.04+ / Debian 11+ / CentOS 7+

推荐配置

  • CPU: 2 核
  • 内存:2GB
  • 磁盘:10GB SSD
  • 系统:Ubuntu 22.04 LTS

网络要求

  • 开放端口:8080(HTTP)、443(HTTPS,可选)
  • 出站访问:GitHub、npm、技能市场

故障排查

常见问题

1. 端口被占用

# 查看端口占用
lsof -i :8080

# 修改端口
openclaw config set gateway.port 8081
openclaw gateway restart

2. 内存不足

# 查看内存使用
free -h

# 优化配置
openclaw config set session.max_concurrent 5

3. 依赖安装失败

# 清理缓存
npm cache clean --force

# 重新安装
npm install --legacy-peer-deps

4. Gateway 无法启动

# 查看日志
openclaw gateway logs --tail 100

# 重置配置
rm ~/.openclaw/config.json
openclaw gateway init

部署脚本

deploy.sh(Linux/macOS)

#!/bin/bash
set -e

echo "🦞 OpenClaw Quick Deploy"
echo "========================"

# 检测系统
if [ -f /etc/debian_version ]; then
    OS="debian"
elif [ -f /etc/redhat-release ]; then
    OS="centos"
else
    echo "❌ Unsupported OS"
    exit 1
fi

# 安装 Node.js
if ! command -v node &> /dev/null; then
    echo "📦 Installing Node.js..."
    curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
    apt-get install -y nodejs
fi

# 安装 OpenClaw
echo "📦 Installing OpenClaw..."
npm install -g openclaw

# 初始化配置
echo "⚙️  Initializing configuration..."
openclaw gateway init

# 启动服务
echo "🚀 Starting Gateway..."
openclaw gateway start

echo "✅ OpenClaw deployed successfully!"
echo "📍 Access: http://localhost:8080"

相关文件

触发词

  • 自动:检测 deploy、install、setup、openclaw 相关关键词
  • 手动:/openclaw-deploy, /quick-start, /install-openclaw
  • 短语:部署 OpenClaw、安装 OpenClaw、快速开始

Usage

  1. Install the skill
  2. Configure as needed
  3. Run with OpenClaw

Comments

Loading comments...