📦 My skill — 技能工具
v1.0.0Provides 18 OpenClaw tools for task management, skill loading, code navigation, config management, and MCP client interactions.
0· 27·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe plugin's declared features match its code, but the provided index.ts was truncated and the plugin exposes network-capable MCP and LSP tools that could access files or remote services — review the full code and network behavior before installing.
评估建议
This plugin appears coherent with its description, but exercise caution because it exposes tools that can interact with local files (LSP/config) and remote MCP servers. Before installing: 1) review the complete index.ts (the provided snippet was truncated) for any code that reads arbitrary files, executes shell commands, or posts data to external endpoints; 2) confirm mcp_call_tool only connects to trusted servers and cannot be instructed to exfiltrate data; 3) if you allow autonomous invocation...详细分析 ▾
✓ 用途与能力
The name/description claim 18 tools for tasks, skill loading, LSP, config and MCP client interactions; the code registers those tools and the package metadata matches the install command in SKILL.md. There are no unexpected required binaries or environment variables declared.
ℹ 指令范围
SKILL.md is narrowly scoped (lists tools, examples, and a plugin install command) and doesn't instruct broad system access. The plugin exposes operations (skill_load, LSP operations, mcp_call_tool) that — depending on full implementation — may read files or contact arbitrary servers; the visible portion uses an in-memory 'skills' list rather than loading arbitrary files, but the full index.ts was truncated in the provided bundle, so this is worth verifying.
✓ 安装机制
No external install spec is present beyond the documented openclaw plugins install command; package.json and SKILL.md are consistent with an npm-style plugin. No downloads from arbitrary URLs or extract operations are present in the visible files.
✓ 凭证需求
The plugin declares no required environment variables, credentials, or config paths. There are no obvious requests for unrelated secrets in the visible code or SKILL.md.
ℹ 持久化与权限
always is false and the skill is user-invocable. Model invocation is allowed (default) — this is expected, but because the plugin can call MCP servers and perform LSP/config operations, autonomous invocation increases risk if those operations can contact remote endpoints or access files. Consider limiting autonomous use until code is audited.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
Initial release of customtools. - Introduces 18 practical OpenClaw tools for task management, code intelligence, configuration, and MCP client features. - Includes commands for creating, listing, and updating tasks. - Adds skill loading and search functions. - Provides LSP-based code navigation utilities. - Enhances configuration management with get/set/list/export/reset actions. - Integrates MCP server and tool management utilities. - Requires OpenClaw >= 2026.4.0 and Node.js >= 18.
● 无害
安装命令
点击复制官方npx clawhub@latest install customtools
镜像加速npx clawhub@latest install customtools --registry https://cn.longxiaskill.com
技能文档
简介
Custom Tools 是 OpenClaw 的扩展插件，提供 18 个实用工具，涵盖任务管理、代码智能、配置管理等场景。
包含工具
Task 任务管理
task_create- 创建新任务task_list- 列出所有任务task_get- 获取任务详情task_update- 更新任务状态task_stop- 停止/完成任务
Skill 技能加载
skill_load- 动态加载技能skill_list- 列出可用技能skill_search- 搜索技能
LSP 代码导航
lsp_goto_definition- 跳转到定义lsp_find_references- 查找引用lsp_document_symbols- 获取文档符号lsp_hover- 获取悬停信息lsp_workspace_symbol- 工作区符号搜索
Config 配置管理
config_get- 获取配置项config_set- 设置配置项config_list- 列出配置分类config_export- 导出配置config_reset- 重置配置
MCP 客户端
mcp_echo- 测试MCP服务器连接mcp_list_servers- 列出已添加的MCP服务器mcp_list_tools- 获取MCP工具列表mcp_call_tool- 调用MCP工具
安装
openclaw plugins install @custom/openclaw-custom-tools
使用示例
创建任务
task_create { "subject": "完成项目报告" }
列出任务
task_list
搜索技能
skill_search { "query": "天气" }
系统要求
- OpenClaw >= 2026.4.0
- Node.js >= 18
许可证
MIT-0