📦 Nomad — 集群查询
v1.0.0连接 HashiCorp Nomad 集群，只读获取作业、节点、分配、评估与服务列表，用于监控与排障。
1· 1.9k·4 当前·4 累计
by @danfedick下载技能包
最后更新
2026/2/27
安全扫描
OpenClaw
可疑
medium confidenceThe skill's described purpose (read-only Nomad queries) matches the runtime commands, but the SKILL.md references environment variables and helper binaries that are not declared in the registry metadata and the instructions can access potentially sensitive cluster data (variables, logs).
评估建议
This skill appears to do what it says (read-only Nomad queries), but there are important mismatches and sensitive-data risks to consider before installing:
- Metadata mismatch: The SKILL.md requires NOMAD_ADDR and (optionally) NOMAD_TOKEN and TLS cert/key paths, but the registry metadata lists no required environment variables. Ask the publisher to update metadata to declare these requirements so you know what the skill will need.
- Sensitive access: If you provide NOMAD_TOKEN or client certs, ...详细分析 ▾
ℹ 用途与能力
The name/description match the runtime instructions: the SKILL.md only shows read-only nomad CLI commands (jobs, nodes, allocs, evals, services, variables, logs). However the registry metadata lists no required env vars while the SKILL.md explicitly requires NOMAD_ADDR and optionally NOMAD_TOKEN, plus TLS cert/key paths — an inconsistency that should be resolved.
⚠ 指令范围
The SKILL.md instructs the agent to run nomad CLI commands that can return sensitive data (nomad var get, alloc logs). It also uses shell pipelines and tools not declared in metadata (examples use jq and grep, command substitution). The instructions do not overreach beyond Nomad, but they do allow reading secrets and logs if the environment or token permits.
✓ 安装机制
There is no install spec and no code files — instruction-only. That minimizes disk-write risk. It does require the 'nomad' binary to be present, which is consistent with an instruction-only CLI wrapper.
⚠ 凭证需求
The SKILL.md lists several environment variables (NOMAD_ADDR, NOMAD_TOKEN, NOMAD_NAMESPACE, NOMAD_REGION, NOMAD_CACERT, NOMAD_CLIENT_CERT, NOMAD_CLIENT_KEY) yet registry metadata declares no required env vars or primary credential. Requesting NOMAD_TOKEN (or client cert/key paths) is reasonable for accessing a protected Nomad cluster, but these are sensitive credentials; the skill should declare them explicitly and justify each. Also the skill can access Nomad variables which may contain secrets.
✓ 持久化与权限
The skill does not request permanent/always-on presence and defaults are normal (always: false, agent invocation allowed). It does not attempt to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/1/26
Initial release — provides read-only monitoring and troubleshooting commands for HashiCorp Nomad clusters. - Query jobs, allocations, nodes, evaluations, services, and variables using the Nomad CLI. - All commands support monitoring scenarios (status, logs, history, listing). - Supports JSON output and expression-based filtering. - Emphasizes read-only usage; job or cluster modifications are not included. - Documents required environment variables and common usage patterns.
● 无害
安装命令
点击复制官方npx clawhub@latest install nomad
镜像加速npx clawhub@latest install nomad --registry https://cn.longxiaskill.com