首页 › 龙虾技能列表 › AI Dev Runtime

🛠️ AI Dev Runtime

v0.5.0

AI Dev Runtime tools - read_file, search, edit, run_terminal, run_tests (hybrid semantic+keyword search, learning memory)

0· 265·1 当前·1 累计
by @sammytan·MIT-0
下载技能包 项目主页
License
MIT-0
最后更新
2026/4/14
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's stated purpose (a local Dev Runtime for reading/searching/editing/running tests) matches its instructions, but the SKILL.md asks the agent to send code snippets and prior memory to an HTTP endpoint (configurable via AI_DEV_RUNTIME_URL) and references environment variables (AI_DEV_RUNTIME_URL, AI_DEV_RUNTIME_API_KEY) that are not declared in the registry metadata — this creates a potential for unintended code or secret exfiltration and is an incoherence to be aware of.
评估建议
This appears to be a developer tooling integration that expects an AiDevRuntime HTTP service and will send code snippets and prior 'memory' to that service. Before enabling: 1) Confirm where AI_DEV_RUNTIME_URL will point — prefer running the service locally (localhost) rather than a remote/third-party host. 2) Treat AI_DEV_RUNTIME_API_KEY as a secret if used; ask the maintainer to declare required env vars in the manifest. 3) Ask what exact data the runtime receives and whether it persists or sh...
详细分析 ▾
ℹ 用途与能力
The name/description (tools for read_file, search, edit, run_terminal, run_tests, semantic+keyword search, memory) align with the instructions which describe an AiDevRuntime HTTP service exposing those operations. That capability set is coherent with the stated purpose. Minor mismatch: SKILL.md expects environment configuration (AI_DEV_RUNTIME_URL, optional API key) despite the registry declaring no required env vars.
⚠ 指令范围
Runtime instructions direct the agent to call an external/local HTTP service and to use memory_search and pass prior code snippets as prior_memory so the runtime can use them. This means the agent will send repository snippets / past fixes / memory to the configured endpoint. SKILL.md also implicitly grants the agent discretion to look up 'similar past fixes' and pass them along — that can lead to sending sensitive code, tokens, or other secrets to the endpoint. The instructions reference env vars (AI_DEV_RUNTIME_URL, AI_DEV_RUNTIME_API_KEY) that are not declared by the skill manifest, creating an inconsistency about what the skill will access.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files — low disk/write risk. Nothing is downloaded or installed by the skill manifest.
⚠ 凭证需求
The SKILL.md asks users to set AI_DEV_RUNTIME_URL (default localhost) and optionally AI_DEV_RUNTIME_API_KEY, but the manifest lists no required environment variables or primary credential. Because the endpoint is configurable, the agent could be pointed at a remote server and will transmit code and memory there; that capability justifies declaring and documenting the env vars and the threat model. The mismatch between declared env and instructions is a proportionality and transparency issue.
✓ 持久化与权限
The skill does not request always:true, does not install persistent components, and does not claim to modify other skills or global agent settings. Default autonomous invocation is allowed (normal) but not combined with other high-privilege flags.
安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

运行时依赖

无特殊依赖

版本

latestv0.5.02026/3/16

Version 0.5.0 of ai-dev-runtime - Introduced new tools and workflows for interacting with AI Dev Runtime, including commands for full dev tasks, low-level operations, batch execution, bug fixing, and analysis. - Added support for hybrid semantic + keyword code search with learning memory. - Recommended improved workflow using memory_search and prior_memory for higher accuracy when fixing bugs or running tasks. - Clarified usage instructions for setup with AI_DEV_RUNTIME_URL and API key. - Updated documentation and metadata for easier onboarding and usage.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install ai-dev-runtime
镜像加速npx clawhub@latest install ai-dev-runtime --registry https://cn.clawhub-mirror.com

技能文档

Use these tools to interact with AI Dev Runtime:

  • ai_dev_runtime_command: Slash command — /ai-dev-runtime runs full dev task (plan → edit → test → fix)
  • ai_dev_runtime_invoke: Low-level tool calls — read_file, search, edit, edit_multi, apply_patch, find_references, call_hierarchy, run_terminal, run_tests
  • ai_dev_runtime_run_task: Batch task execution (multi-step coding)
  • ai_dev_runtime_fix_bug: Bug-fix workflow (analyze → patch → verify)
  • ai_dev_runtime_analyze: Codebase analysis (semantic + keyword search, learning memory)

For higher accuracy: Before calling ai_dev_runtime_fix_bug or ai_dev_runtime_run_task, use memory_search to find similar past fixes (e.g. "login bug", "500 error", "pytest"). Pass the snippets as prior_memory so Runtime can use them.

Set AI_DEV_RUNTIME_URL (default http://localhost:8000) and optionally AI_DEV_RUNTIME_API_KEY. Ensure AiDevRuntime HTTP server is running.

数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务