📦 my-computer — 本地电脑自动化
v1.0.0桌面自动化助手，通过 CLI 命令、应用自动化与脚本直接操控本地电脑，可执行文件管理、软件操作、系统配置等任务，无需手动干预即可高效完成复杂本地流程。
0· 247·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it claims: local file and application automation implemented as shell scripts. However, it will enumerate and modify files, run AppleScript (can read Mail, Calendar, browser state), and writes manifests with absolute paths to ~/.my-computer-manifests. The reference docs show examples that post reports or files to Slack using SLACK_WEBHOOK_URL or SLACK_TOKEN — those are not declared as required env vars in the registry. Before using:
- Only run it with explicit user...详细分析 ▾
✓ 用途与能力
Name/description describe local desktop automation and the included scripts (disk_report, batch_preview, batch_executor, find_duplicates, undo) directly implement that functionality. The references about macOS/Linux/Windows tooling and application automation align with the stated purpose.
ℹ 指令范围
SKILL.md and the reference docs explicitly instruct the agent to inspect arbitrary filesystem locations, read metadata (EXIF/mdls), run AppleScript/osascript (Mail, Calendar, Finder, browsers), and manipulate files (move/rename/delete). This is coherent for a local automation tool, but it means the skill will read potentially sensitive local data and control apps — the user should expect that level of access. The docs also include examples that send data to external endpoints (Slack webhook / Slack API) which can transmit local files or reports off-machine if credentials are supplied.
✓ 安装机制
Instruction-only skill with no install spec. All code is plain shell scripts bundled in the skill; nothing is downloaded from external URLs and no archives are extracted. This minimizes install-time risk.
⚠ 凭证需求
Registry metadata declares no required env vars, but documentation/examples reference environment variables (e.g., SLACK_WEBHOOK_URL, SLACK_TOKEN) and the skill supports uploading reports/files to external services. The skill will create persistent manifests under ~/.my-computer-manifests containing absolute file paths. Asking for or supplying credentials for cloud endpoints is optional but not declared in metadata — that mismatch increases the risk of accidental data exfiltration if credentials are provided or used without user understanding.
ℹ 持久化与权限
always:false (normal). The scripts create a manifest directory in the user's home (~/.my-computer-manifests) to record actions and enable undo; this is expected for a batch executor but does mean manifests storing full paths will persist on disk. The skill does not request system-wide privilege changes or modify other skills' settings.
⚠ scripts/undo_operation.sh:42
Dynamic code execution detected.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install my-computer
镜像加速npx clawhub@latest install my-computer --registry https://cn.longxiaskill.com