Openclaw Quickstart Cn — 技能工具
v1.0.1中文用户快速安装配置国产AI模型并测试OpenClaw全流程指导，包括环境检查、模型配置、连接测试及扩展技能安装。
0· 117·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill is a coherent Chinese quickstart for configuring Chinese AI providers, but its runtime instructions recommend piping a remote installer (curl https://get.openclaw.ai | bash) which is a high-risk action not reflected in the manifest; review the installer before running.
评估建议
This guide appears to be a legitimate quickstart for configuring Chinese AI providers, but it recommends running a remote installer via 'curl | bash' which can execute arbitrary code on your machine. Before proceeding: (1) verify the installer URL (get.openclaw.ai) — check the project's official repo or homepage and confirm the install script's contents; (2) prefer the npm install path if you trust the package registry and maintainers; (3) if you must use the curl method, download the script fir...详细分析 ▾
ℹ 用途与能力
The name/description (OpenClaw quickstart for Chinese users) match the SKILL.md instructions (environment checks, configuring DeepSeek/Zhipu/Qwen). Nothing in the manifest asks for unrelated credentials or files. However the guide tells users to run a remote installer (curl | bash) which effectively extends the skill beyond 'instruction-only' and should be explicitly declared.
ℹ 指令范围
Instructions are narrowly scoped to environment checks (node, uname), installing OpenClaw (curl|bash or npm), configuring provider API keys, and testing status/logs. They do not ask the agent to read arbitrary user files or exfiltrate data, but the curl | bash pattern instructs executing remote code, which could perform additional actions not visible in SKILL.md.
⚠ 安装机制
No install spec is declared in the registry metadata, yet the document directs users to run 'curl -fsSL https://get.openclaw.ai | bash' — piping a remote script to the shell is a high-risk install mechanism. The alternative npm install is lower risk. The remote URL is not a well-known release host (e.g., GitHub releases) and the manifest does not include a verified installer checksum or reproducible source.
✓ 凭证需求
The skill does not request environment variables or secrets in the manifest. The documented workflow legitimately requires provider API keys (DeepSeek, Zhipu, Qwen); these are proportional to the stated purpose and are set via the OpenClaw CLI, not requested by the skill itself.
ℹ 持久化与权限
Registry flags show no forced persistence (always:false) and no special privileges. However, following the SKILL.md install (remote installer) could create persistent system binaries or services — that persistence would come from the external installer, not from the skill metadata.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/21
OpenClaw 快速入门指南 v1.0.1 - 文档整体重写，更注重中文用户易用性与本地 AI 模型配置流程 - 增加 Node.js 环境检查与快速安装命令 - 优化国产 AI 模型（DeepSeek/智谱/通义）配置说明，用更简明的配置指令替代原步骤 - 新增模型价格对比表，便于选择 - 增加常见问题解答与付费支持信息
● 可疑
安装命令 点击复制
官方npx clawhub@latest install openclaw-quickstart-cn
镜像加速npx clawhub@latest install openclaw-quickstart-cn --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制