🧪 Mac Dev Staging — 将 Mac 转为本地 PHP/MariaDB 测试服务器
v1.1.0利用 Mac 的 Apache、Homebrew PHP 8.5、MariaDB、内置 SFTP、npm 工具和可选 nginx，快速搭建本地 PHP 开发或测试环境，适用于 Joomla、WordPress 等 PHP 应用。
0· 276·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidence该技能的文件、指令和所需操作与其将 Mac 转为可重复使用的本地 PHP/MariaDB 测试服务器的目的保持一致。
评估建议
该技能如所宣称般工作，但执行系统级更改，需要以提升权限运行：使用 Homebrew 安装包，需要 sudo 重启 Apache 或启用远程登录，构建命令在项目目录中运行 npm。运行前，请审查脚本、备份 Apache 配置、先运行检测脚本确认状态，不要将 Mac 控制器暴露给公网。如果计划让代理自主调用此技能，只有在完全信任的情况下才启用，因为脚本可以启动/停止服务并在提供的路径下运行任意 npm 构建脚本。...详细分析 ▾
✓ 用途与能力
Name/description match the included scripts and README: detect system state, install Homebrew packages (php, mariadb, nginx, node), render Apache vhosts/snippets, manage services, verify stack, and emit receipts. Nothing requested (no external credentials, no unrelated binaries) appears out of scope.
ℹ 指令范围
SKILL.md directs running the included shell scripts which inspect system files (/etc/apache2), launchctl, systemsetup, lsof/netstat and call sudo for apachectl and systemsetup when applicable. This is expected for a system-level Mac staging setup. Note: controller.sh's build action runs npm in a target directory (which may execute arbitrary package scripts), and write-receipt.sh writes JSONL receipts to a local .mac-dev-staging directory—both are intended but worth reviewing before use.
✓ 安装机制
No install spec in the registry; the skill is instruction + scripts. The scripts themselves use Homebrew to install packages (brew install) and npm to install global tooling—no downloads from untrusted URLs or archive extraction are present.
✓ 凭证需求
The skill declares no required environment variables or credentials. It renders an optional local gateway env with sensible defaults (including a default MAIN_GATEWAY_HTTP value) but does not require secrets or tokens. Use of sudo is necessary for system changes but is proportional to the stated goals.
✓ 持久化与权限
always:false and no install hook means the skill does not force permanent inclusion. The scripts may write receipts under a local directory and start/stop services via brew/apachectl when run by the user; they do not attempt to modify other skills or system-wide agent configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/4
mac-dev-staging 1.1.0 - 添加 ClawHub 卡 emoji 元数据。- 无行为变化；这是一个演示和注册元数据更新。
● 无害
安装命令
点击复制官方npx clawhub@latest install mac-dev-staging
镜像加速npx clawhub@latest install mac-dev-staging --registry https://cn.longxiaskill.com
技能文档
使用此技能时，您想要 Mac 行为像一个可重复使用的本地开发或测试服务器。该技能围绕现代 Apple Silicon Mac 上的实际堆栈构建：
- 股票 macOS Apache (
/usr/sbin/httpd) - Homebrew PHP 8.5
- Homebrew MariaDB
- 内置 macOS SSH/SFTP
- npm 管理的 JS 工具用于本地构建/测试工作流
- 一个与主 OpenClaw 网关共存的开发本地网关表面
- 可选 Homebrew nginx
... （中间内容与原文相同，仅示例开始）