首页龙虾技能列表 › openclaw-with-vscode — 技能工具

openclaw-with-vscode — 技能工具

v1.0.0

Bridge between OpenClaw and VS Code Copilot — dispatch coding tasks from any OpenClaw channel to VS Code for execution.

1· 221·0 当前·0 累计
by @diankourenxia·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/11
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's functionality (forwarding prompts to a local VS Code extension) is coherent, but the SKILL.md contains misleading security claims and understates the real risk that Copilot (which uses GitHub services and can edit/run things) can send data off-machine and modify files/execute commands.
评估建议
This skill itself is a simple local forwarder and does not ask for secrets, but exercise caution before enabling it: 1) Verify the OpenClaw Chat VS Code extension is legitimate (marketplace publisher, source code, reviews). 2) Understand Copilot/Copilot Chat will contact GitHub services using your Copilot credentials — do not forward secrets or private keys in prompts. 3) The skill allows prompts that can cause file edits and run commands in your editor; require user confirmation for any destruc...
详细分析 ▾
用途与能力
Name/description match the instructions: the skill is an instruction-only bridge that POSTs JSON to a local endpoint. Requiring curl and only local endpoints is proportionate to the stated purpose.
指令范围
Instructions tell the agent to send arbitrary coding tasks to http://localhost:19836/trigger which will cause Copilot to 'edit files, run commands, create code, and more.' The doc does not constrain or validate what may be executed, nor does it require explicit user confirmation before dangerous actions. The SKILL.md also asserts 'All traffic is local' which is misleading because Copilot/ Copilot Chat will contact GitHub's services to process prompts, meaning user code/prompts can leave the machine and be sent to external servers.
安装机制
Instruction-only skill with no install spec and only a recommendation to install a VS Code extension via the official marketplace. No code is downloaded by the skill itself.
凭证需求
The skill requests no env vars or credentials, which is reasonable. However, it depends on the user's VS Code + Copilot auth (GitHub account and Copilot) implicitly; the SKILL.md fails to acknowledge that Copilot’s processing uses GitHub services and the user's GitHub credentials, which is relevant for privacy/credential exposure.
持久化与权限
always:false and no install changes are fine. Be aware the platform default allows autonomous invocation; combined with the ability to forward arbitrary prompts that cause local edits/command execution, this increases blast radius if the agent is allowed to call the skill without per-action user confirmation.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/18

Initial release: Integrates OpenClaw with VS Code Copilot to execute coding tasks locally. - Dispatch write, edit, review, or debug requests from OpenClaw directly to VS Code Copilot. - Utilizes local HTTP endpoints for all communication; no data is sent externally. - Includes setup instructions and workflow for task execution and result display. - Requires VS Code to be open with Copilot in Agent mode for full functionality. - Health check and endpoint details provided for troubleshooting.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install openclaw-with-vscode
镜像加速npx clawhub@latest install openclaw-with-vscode --registry https://cn.clawhub-mirror.com

技能文档

Dispatch coding tasks from OpenClaw to VS Code Copilot for execution. When the user asks you to write, edit, review, or debug code, send the task to VS Code where Copilot will execute it — editing files, running commands, creating code, and more.

将编码任务从 OpenClaw 分发到 VS Code Copilot 执行。当用户要求编写、编辑、审查或调试代码时,将任务发送到 VS Code,由 Copilot 代为执行——编辑文件、运行命令、创建代码等。

Setup / 安装

Install the OpenClaw Chat extension from VS Code Marketplace: 从 VS Code 扩展商店安装 OpenClaw Chat 扩展:

code --install-extension wodeapp.openclaw-chat

Or search "OpenClaw Chat" in VS Code Extensions panel. 或在 VS Code 扩展面板搜索 "OpenClaw Chat" 安装。

The extension starts automatically with VS Code. No manual launch needed. 扩展会随 VS Code 自动启动,无需手动操作。

External Endpoints / 端点

EndpointMethodData Sent / 发送数据
http://localhost:19836/triggerPOST{"prompt":"..."} — the coding task / 编码任务
http://localhost:19836/healthGETNone / 无
All traffic is local (127.0.0.1). No data leaves the machine. 所有流量均在本地(127.0.0.1),不会发送到外部。

Workflow / 工作流程

  • Check if the extension is running / 检查扩展是否运行:
curl -s http://localhost:19836/health

If not running, guide the user through Setup above. 如未运行,引导用户完成上方安装步骤。

  • Send the coding task / 发送编码任务:
curl -s -X POST http://localhost:19836/trigger \
  -H "Content-Type: application/json" \
  -d '{"prompt":""}'
  • The response JSON contains a response field with Copilot's reply. Display it to the user.
返回的 JSON 包含 response 字段,内含 Copilot 的回复。将其展示给用户。

Example / 示例

User says / 用户说: "帮我写一个防抖函数"

curl -s -X POST http://localhost:19836/trigger \
  -H "Content-Type: application/json" \
  -d '{"prompt":"在当前打开的文件里写一个 TypeScript 防抖函数"}'

Response / 返回:

{"ok":true,"prompt":"...","response":"Here is a debounce function..."}

Security & Privacy / 安全与隐私

  • All HTTP traffic stays on localhost (127.0.0.1:19836) / 所有流量仅在本地
  • No data is sent to external servers by this skill / 此 skill 不会向外部发送数据
  • Copilot processes the request using GitHub's API (standard Copilot behavior) / Copilot 通过 GitHub API 处理请求(标准行为)

Notes / 注意事项

  • VS Code must be open / VS Code 必须处于打开状态
  • Copilot Chat should be in Agent mode for full execution / Copilot Chat 应切换到 Agent 模式以获得完整执行能力
  • Always run health check before dispatching if unsure / 不确定时先执行健康检查
  • Always show the response to the user / 始终将回复展示给用户
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务