Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

OpenClaw安装服务

v1.0.0

快速安装和配置 OpenClaw,支持微信、飞书、钉钉 Channel 设置及心跳和自动化任务管理。

0· 308·2 current·2 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill's name/description (install and configure OpenClaw, set Channels and heartbeats) matches the runtime instructions: checking Node/npm, running `npm install -g openclaw`, `openclaw init`, adding channels, editing HEARTBEAT.md and starting heartbeat. No unrelated services or credentials are requested.
Instruction Scope
Instructions stay focused on installing and configuring OpenClaw. They reference a user home config path (~/.openclaw/workspace/HEARTBEAT.md) which is expected. The doc does not instruct the agent to collect or transmit arbitrary system data. It does not, however, provide guidance on how channel secrets (App ID/Secret/Webhook) should be supplied or stored — a useful security omission to be aware of.
Install Mechanism
Installation is via `npm install -g openclaw` (documented but not enforced by an install spec). Global npm installs run code from the npm registry and are therefore moderate risk if the package is untrusted; the SKILL.md does not include verification steps (checksums, trusted source) or an alternative (local/container install).
Credentials
The skill declares no required env vars or secrets. Channel configuration steps imply the user will need to provide service credentials, which is proportional to the purpose. There are no requests for unrelated secrets or config paths.
Persistence & Privilege
The skill is instruction-only, has no install spec, and does not request always:true or other elevated privileges. It does not attempt to modify other skills or system-wide agent settings.
Assessment
This skill is coherent for helping install and configure an npm-based OpenClaw CLI, but take normal precautions before running the commands: 1) Verify the npm package name and publisher (look up the package on the npm registry and the referenced GitHub/docs links) to avoid typosquatting. 2) Prefer to inspect package contents or install in a container/VM rather than doing a global install as root. 3) When configuring Channels, provide App IDs, Secrets, and Webhooks only when you trust the target service and store them securely (avoid pasting secrets into third-party chat threads). 4) The doc includes a cryptocurrency payment address — that is external to installation and not needed to install the software; do not send funds without independent verification. 5) If you are unsure about the authenticity of the OpenClaw project, ask the provider for signed release info or use an isolated environment for testing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97csyk7qpr48he93fen4mx20182q3jkopenclawvk97csyk7qpr48he93fen4mx20182q3jksetupvk97csyk7qpr48he93fen4mx20182q3jk
308downloads
0stars
1versions
Updated 6h ago
v1.0.0
MIT-0

OpenClaw Setup Assistant Skill

帮助用户快速安装配置 OpenClaw,提供远程服务支持。

功能

  • 一键安装 OpenClaw CLI
  • 配置常用 Channel(微信/飞书/钉钉)
  • 设置心跳和自动化任务
  • 提供 Skills 推荐
  • 故障排查指南

使用方式

帮我安装 OpenClaw
配置微信 Channel
设置每日简报心跳

安装流程

步骤 1:检查环境

# 检查 Node.js 版本
node -v  # 需要 >= 18

# 检查 npm
npm -v

步骤 2:安装 OpenClaw

npm install -g openclaw

步骤 3:初始化工作区

openclaw init

步骤 4:配置 Channel

微信

openclaw channel add wechat
# 扫码登录

飞书

openclaw channel add feishu
# 配置 App ID 和 Secret

钉钉

openclaw channel add dingtalk
# 配置 Webhook

步骤 5:设置心跳

# 编辑 heartbeat.md
openclaw edit ~/.openclaw/workspace/HEARTBEAT.md

# 启动心跳服务
openclaw heartbeat start

定价

套餐价格内容
基础安装¥99远程安装 + 基础配置
完整配置¥299安装 + Channel配置 + 3个Skills
企业定制¥999安装 + 多Channel + 自定义Skills + 培训

收款地址

USDT TRC20: TYTvuzacfUgeei36NK9dmfUCKFqiQfYizp

常见问题

Q: 安装失败怎么办?

A: 检查网络连接,确保能访问 npm 仓库。中国大陆用户建议使用淘宝镜像:

npm config set registry https://registry.npmmirror.com

Q: 微信登录不上?

A: 确保微信是最新版本,扫码后需要在手机上确认登录。

Q: 心跳不执行?

A: 检查 HEARTBEAT.md 格式是否正确,确保 openclaw heartbeat start 已运行。

技术支持


创建时间:2026-03-11 服务提供:ClawMart

Comments

Loading comments...