安全扫描
OpenClaw
安全
high confidenceThe skill's requests and runtime instructions match its stated purpose (Rollbar API access), and it only requires a Rollbar access token plus curl/python3; nothing in the files indicates data exfiltration or behavior outside Rollbar's API.
评估建议
This skill appears coherent and implements only Rollbar API interactions. Before installing: 1) Use a least-privilege Rollbar token (project-level read-only when possible); avoid account-level tokens unless necessary. 2) Store the token in a secrets manager or environment variable — avoid committing it to repos. 3) If you plan to run proactive cron checks, confirm where alerts/summaries will be delivered and how logs are stored to avoid accidental token exposure. 4) Review the included rollbar.s...详细分析 ▾
✓ 用途与能力
Name/description request a Rollbar access token and require curl/python3 — exactly what is needed to call the Rollbar API. The commands and options in SKILL.md map directly to API operations implemented in rollbar.sh.
✓ 指令范围
SKILL.md instructs setting ROLLBAR_ACCESS_TOKEN, running the included rollbar.sh, and optionally scheduling a cron check. The instructions do not ask the agent to read unrelated files or send data to any endpoint other than api.rollbar.com.
✓ 安装机制
No install spec is provided (instruction-only), and the shipped helper is a plain shell script. Nothing is downloaded or executed from arbitrary URLs; no archive extraction or remote installers are used.
ℹ 凭证需求
Only ROLLBAR_ACCESS_TOKEN is required, which is proportional. Note: the skill supports both project-level (recommended) and account-level tokens — account tokens are broader in scope, so the user should prefer a project read-only token unless multi-project access is required.
✓ 持久化与权限
always is false and the skill does not request persistent system privileges or modify other skills. The script runs on-demand or via cron as the user configures.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/2/20
Security: fix shell injection in ITEM_ID/PROJECT_ID args, fix Python code injection in LIMIT/HOURS params. All inputs now validated and passed via env vars.
● 无害
安装命令 点击复制
官方npx clawhub@latest install rollbar
镜像加速npx clawhub@latest install rollbar --registry https://cn.clawhub-mirror.com
技能文档
Monitor and manage Rollbar errors directly from OpenClaw.
Setup
Set your Rollbar access token as an environment variable:
export ROLLBAR_ACCESS_TOKEN=your-token
⚠️ Security: Store tokens in environment variables or a secure secret manager — never commit them to repository files.
Two token types are supported:
- Project-level token (recommended) — found in Rollbar → Project → Settings → Project Access Tokens. Use a token with
readscope for monitoring; addwritescope only if you need to resolve/mute items. This is the most restrictive and safest option for single-project use. - Account-level token (for multi-project setups) — found in Rollbar → Account Settings → Account Access Tokens. Use
--project-idto target specific projects. The skill auto-resolves a project read token from the account token. Note: account tokens grant broader access — only use when you need to monitor multiple projects.
Commands
All commands use the helper script rollbar.sh in this skill directory.
List projects (account token only)
./skills/rollbar/rollbar.sh projects
List recent items (errors/warnings)
./skills/rollbar/rollbar.sh items [--project-id ] [--status active|resolved|muted] [--level critical|error|warning|info] [--limit 20]
Get item details
./skills/rollbar/rollbar.sh item
Get occurrences for an item
./skills/rollbar/rollbar.sh occurrences [--limit 5]
Resolve an item
./skills/rollbar/rollbar.sh resolve
Mute an item
./skills/rollbar/rollbar.sh mute
Activate (reopen) an item
./skills/rollbar/rollbar.sh activate
List deploys
./skills/rollbar/rollbar.sh deploys [--limit 10]
Get project info
./skills/rollbar/rollbar.sh project
Top active items (summary)
./skills/rollbar/rollbar.sh top [--limit 10] [--hours 24]
Proactive Monitoring
To get automatic alerts for new critical/error items, set up a cron job in OpenClaw:
"Check Rollbar for new critical or error-level items in the last hour. If any new items appeared, summarize them and alert me."
Recommended schedule: every 30–60 minutes during work hours.
Notes
- All output is JSON for easy parsing.
- The
topcommand sorts active items by occurrence count — useful for daily triage. - Rollbar API docs: https://docs.rollbar.com/reference
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制