by 安全扫描
OpenClaw
可疑
medium confidence该技能实现了描述的 OBS 场景重建工作流，但存在一些不一致和暴露风险（通过 HTTP 服务整个工作空间、未记录的二进制要求和直接数据库更新），在运行前应了解这些风险。
评估建议
该技能基本如所描述（使用 mcporter/agentic-obs 重建场景并附加叠加层），但在运行前请采取以下预防措施：
- 审查和确认依赖项：确保 mcporter、sqlite3 和 python3 是您机器上的预期二进制文件。注册元数据未声明这些，但脚本调用了它们。
- 检查和控制叠加层服务器：start_overlay_server.sh 通过 LAN 端口（默认：8787）服务您的整个工作空间。如果运行它，请确保工作空间中没有敏感文件，或者从受限或临时目录运行服务器。考虑使用带有身份验证的反向代理或防火墙规则来限制访问。
- 备份 agentic-obs 数据库：obs_target_switch.sh 更新 agentic-obs SQLite 数据库（默认 `$HOME/.agentic-obs/db.sqlite`）。在运行之前备份该数据库或将 `AGENTIC_OBS_DB` 设置为测试数据库以避免意外的配置错误。
- 首先在隔离/测试环境中运行：在分阶段 VM 或容器中重建/测试场景并进行烟雾测试，以确认行为和副作用。
- 检查外部端点期望：控制面板引用了一个本地...详细分析 ▾
ℹ 用途与能力
Name/description match the provided scripts and assets: the skill rebuilds OBS scenes via mcporter/agentic-obs and serves browser-overlay HTML. However, the skill metadata declares no required binaries or env vars while the scripts clearly assume mcporter, sqlite3 and python3 are present and will write into an agentic-obs SQLite DB (default $HOME/.agentic-obs/db.sqlite). The mismatch (declared requirements none vs. actual script dependencies) is an inconsistency to be aware of.
⚠ 指令范围
SKILL.md is specific and scoped to rebuilding scenes and running smoke tests, which matches the scripts. But start_overlay_server.sh launches a simple HTTP server that serves the entire workspace directory (default) on the LAN (port 8787), which can unintentionally expose any files in your workspace. obs_target_switch.sh directly updates the agentic-obs SQLite config (obs_host/obs_port), modifying another component's configuration file. Control-panel.html references a local screenshot endpoint (127.0.0.1:8765) that is not provided by the skill. These behaviors are within the claimed purpose but increase the attack surface and potential for accidental data exposure.
ℹ 安装机制
This is an instruction-only skill (no install spec), so nothing is downloaded or installed by the registry. That lowers supply-chain risk. However, the bundled scripts are executable and expect external binaries (mcporter, sqlite3, python3). The absence of an install step or declared binary requirements is a practical mismatch — the scripts can fail or behave unexpectedly if those tools aren't present or are different versions.
ℹ 凭证需求
The skill declares no required env vars or credentials, and it doesn't request secrets. Scripts reference optional env vars (OBS_AUDIO_INPUTS, MIC_DB, DESKTOP_DB, AGENTIC_OBS_DB, OPENCLAW_WORKSPACE, OVERLAY_PORT). The most impactful is AGENTIC_OBS_DB defaulting to $HOME/.agentic-obs/db.sqlite: the scripts will modify that DB if present. While that is relevant to the skill's purpose, it is privileged in the sense of altering another component's configuration and should be noted/confirmed.
ℹ 持久化与权限
always:false and normal autonomous invocation are used. The skill does modify the agentic-obs DB and writes a log and may create a streaming-tests directory under the workspace; it does not request permanent 'always' presence or modify other skills' configs. Modifying the agentic-obs DB is expected for setting target host/port but is a persistent change to another system's configuration and should be done with consent.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.2.02026/3/18
在账户年龄冷却后重试发布
● 可疑
安装命令 点击复制
官方npx clawhub@latest install streaming-obs-bootstrap
镜像加速npx clawhub@latest install streaming-obs-bootstrap --registry https://cn.clawhub-mirror.com
技能文档
使用此技能快速建立一致的 OBS 流媒体场景集并通过录制演示验证它。
先决条件
mcporter已安装并配置了obsMCP 服务器- OBS WebSocket 在目标主机上启用（默认端口
4455） - 覆盖文件存在于工作空间中（
streaming/overlays）
工作流
- 设置目标 OBS 主机（本地或 LAN 主机）
- 启动工作空间 HTTP 服务器用于覆盖层（LAN 可达）
- 重建基线场景包
- 附加覆盖层浏览器源
- 应用过渡预设和可选音频基线
- 运行录制烟雾演示和可选流式干跑
- 共享输出路径和任何故障排除笔记
命令
从工作空间根目录运行。# 1) 目标 OBS 主机
./skills/streaming-obs-bootstrap/scripts/obs_target_switch.sh 4455
# 2) 启动/验证覆盖层主机服务器
./skills/streaming-obs-bootstrap/scripts/start_overlay_server.sh
# 3) 重建场景 + 附加覆盖层
./skills/streaming-obs-bootstrap/scripts/rebuild_scenes.sh
# 4) 应用过渡预设
./skills/streaming-obs-bootstrap/scripts/apply_transition_preset.sh Fade 300
# 5) 可选音频基线（设置 OBS_AUDIO_INPUTS 之前）
# export OBS_AUDIO_INPUTS="Mic/Aux,Desktop Audio"
./skills/streaming-obs-bootstrap/scripts/apply_audio_baseline.sh
# 6) 运行录制演示（默认 7 秒/场景）
./skills/streaming-obs-bootstrap/scripts/smoke_test_walkthrough.sh
# 7) 可选流式干跑（默认 15 秒）
./skills/streaming-obs-bootstrap/scripts/stream_dry_run.sh 15 "Intro" "Main Live"
笔记
- 永远不要使用
/tmp作为持久覆盖层资产。 - 对于远程 OBS， предпочтите使用
http://浏览器源 URL 而不是:8787/... file://。 - 确保 HTML 文件声明 UTF-8 和表情符号兼容的字体栈。
故障排除
请参阅：references/troubleshooting.mdreferences/networking.mdreferences/scene-map.mdreferences/v0.2-features.md
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制