My skill

Provides 18 OpenClaw tools for task management, skill loading, code navigation, config management, and MCP client interactions.

Security Scan

The plugin's declared features match its code, but the provided index.ts was truncated and the plugin exposes network-capable MCP and LSP tools that could access files or remote services — review the full code and network behavior before installing.

Purpose & Capability

The name/description claim 18 tools for tasks, skill loading, LSP, config and MCP client interactions; the code registers those tools and the package metadata matches the install command in SKILL.md. There are no unexpected required binaries or environment variables declared.

Instruction Scope

SKILL.md is narrowly scoped (lists tools, examples, and a plugin install command) and doesn't instruct broad system access. The plugin exposes operations (skill_load, LSP operations, mcp_call_tool) that — depending on full implementation — may read files or contact arbitrary servers; the visible portion uses an in-memory 'skills' list rather than loading arbitrary files, but the full index.ts was truncated in the provided bundle, so this is worth verifying.

Install Mechanism

No external install spec is present beyond the documented openclaw plugins install command; package.json and SKILL.md are consistent with an npm-style plugin. No downloads from arbitrary URLs or extract operations are present in the visible files.

Credentials

The plugin declares no required environment variables, credentials, or config paths. There are no obvious requests for unrelated secrets in the visible code or SKILL.md.

Persistence & Privilege

always is false and the skill is user-invocable. Model invocation is allowed (default) — this is expected, but because the plugin can call MCP servers and perform LSP/config operations, autonomous invocation increases risk if those operations can contact remote endpoints or access files. Consider limiting autonomous use until code is audited.

What to consider before installing

This plugin appears coherent with its description, but exercise caution because it exposes tools that can interact with local files (LSP/config) and remote MCP servers. Before installing: 1) review the complete index.ts (the provided snippet was truncated) for any code that reads arbitrary files, executes shell commands, or posts data to external endpoints; 2) confirm mcp_call_tool only connects to trusted servers and cannot be instructed to exfiltrate data; 3) if you allow autonomous invocation, be aware the plugin could contact remote hosts without additional prompts — consider restricting it to user-invoked only until audited; 4) prefer installing plugins from known publishers or verifying package source (registry, checksum). If you can provide the full index.ts (untruncated), I can re-evaluate with higher confidence.

Custom Tools - OpenClaw 插件

简介

Custom Tools 是 OpenClaw 的扩展插件，提供 18 个实用工具，涵盖任务管理、代码智能、配置管理等场景。

包含工具

Task 任务管理

• task_create - 创建新任务
• task_list - 列出所有任务
• task_get - 获取任务详情
• task_update - 更新任务状态
• task_stop - 停止/完成任务

Skill 技能加载

• skill_load - 动态加载技能
• skill_list - 列出可用技能
• skill_search - 搜索技能

LSP 代码导航

• lsp_goto_definition - 跳转到定义
• lsp_find_references - 查找引用
• lsp_document_symbols - 获取文档符号
• lsp_hover - 获取悬停信息
• lsp_workspace_symbol - 工作区符号搜索

Config 配置管理

• config_get - 获取配置项
• config_set - 设置配置项
• config_list - 列出配置分类
• config_export - 导出配置
• config_reset - 重置配置

MCP 客户端

• mcp_echo - 测试MCP服务器连接
• mcp_list_servers - 列出已添加的MCP服务器
• mcp_list_tools - 获取MCP工具列表
• mcp_call_tool - 调用MCP工具

安装

openclaw plugins install @custom/openclaw-custom-tools

使用示例

创建任务

task_create { "subject": "完成项目报告" }

列出任务

task_list

搜索技能

skill_search { "query": "天气" }

系统要求

• OpenClaw >= 2026.4.0
• Node.js >= 18

许可证

MIT-0