📦 minecraft-server-admin — 远程管理MC服
v1.0.0通过RCON远程控制台执行Minecraft Java版管理命令，实现玩家封禁、白名单维护、物品/状态操作、世界规则调整等服务器运维功能。
0· 284·2 当前·2 累计
by @en1r0py1865下载技能包
最后更新
2026/3/11
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to implement exactly what it claims: an RCON-based remote admin for Minecraft Java servers. Before installing: 1) Ensure you only point MC_RCON_HOST/PORT/PASSWORD at servers you control (RCON grants powerful admin access). 2) Review OpenClaw memory/audit retention settings because the skill will append executed commands/results to agent memory. 3) Confirm whether the declared npm dependency 'rcon-client' is intentional or unused (the included rcon.js implements RCON itself); a...详细分析 ▾
ℹ 用途与能力
The skill requires node and the expected RCON env vars (MC_RCON_HOST, MC_RCON_PORT, MC_RCON_PASSWORD) which are appropriate for a remote RCON admin tool. Minor inconsistency: the install spec declares the npm package 'rcon-client', but the included scripts implement the RCON protocol directly using Node's net/Buffer API and do not require('rcon-client'). This is likely harmless (an unused dependency) but worth confirming.
✓ 指令范围
SKILL.md stays within its stated scope: it sends RCON commands and (optionally) reads the server log file when MC_SERVER_LOG is set. It requires confirmations for destructive/high-privilege commands. The instructions also request appending audit entries to the agent's OpenClaw Memory after operations — this is appropriate for auditability but means command history/results will be stored in agent memory (review retention/privacy settings).
✓ 安装机制
Installation is a standard Node dependency (rcon-client) from the npm ecosystem — a low/moderate risk install mechanism. No downloads from arbitrary URLs or extract/install-from-remote-archive steps are present.
✓ 凭证需求
Required environment variables (MC_RCON_HOST, MC_RCON_PORT, MC_RCON_PASSWORD) are directly relevant and proportionate to RCON connectivity. An optional MC_SERVER_LOG is referenced for log analysis (not listed as required). No unrelated secrets or other service credentials are requested.
✓ 持久化与权限
The skill is not set to always:true and does not request system-wide modifications. It does ask the agent to append audit logs to OpenClaw Memory (its own agent memory) after actions, which is normal for audit purposes. There is no evidence it modifies other skills or global configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/11
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install minecraft-server-admin
镜像加速npx clawhub@latest install minecraft-server-admin --registry https://cn.longxiaskill.com