📦 NPkill — 清理node_modules
v1.0.1一键扫描并安全删除项目中的 node_modules 与 .next 构建缓存，为 JavaScript/Next.js 开发者快速释放磁盘空间，支持交互式与自动化两种模式，并自动跳过系统关键目录，防止误删。
0· 2.1k·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceThe skill's instructions and requirements are internally consistent: it documents use of the npkill CLI to find and delete node_modules/.next folders, asks the user to install npkill via npm, and does not request unrelated credentials or system access.
评估建议
This skill appears coherent and does what it says — it is a wrapper documenting use of the npkill CLI. Before installing or running anything: 1) verify the npm package (npkill) publisher and version on the npm registry to ensure you get the official tool; 2) run `npkill --dry-run` and use interactive mode before any automated deletion; 3) be careful with `--directory` and `--delete-all --yes` since they can delete large sets of folders; 4) installing global npm packages requires elevated permiss...详细分析 ▾
✓ 用途与能力
The name/description (cleaning node_modules and .next) matches the instructions (run npkill, options for target, dry-run, directory, exclusion). Requiring the npkill CLI (via npm) is appropriate for this purpose. The SKILL.md does not ask for unrelated credentials or system services.
ℹ 指令范围
Instructions are narrowly scoped to searching for and deleting build artifact folders and include safety recommendations (dry-run, interactive, exclusions, warnings). The only risk in the instructions is the documented automated delete option (--delete-all --yes), which is destructive by design; the skill advises using dry-run and interactive modes first.
ℹ 安装机制
This is an instruction-only skill with no install spec, so it does not itself write code to disk. It instructs users to run `npm install -g npkill` to obtain the CLI. Installing a global npm package is a standard approach but does pull code from the npm registry — verify the package name, publisher, and version before installing (source/homepage in the skill metadata is unknown).
✓ 凭证需求
No environment variables, credentials, or config paths are requested in the skill or SKILL.md, which is proportional for a local filesystem cleanup tool.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent or cross-skill configuration. It does not ask to modify other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/1/27
Initial release: JavaScript/Next.js build artifact cleanup tool. Safely removes node_modules and .next folders using npkill with interactive selection, safety warnings, and dry-run functionality.
● 可疑
安装命令
点击复制官方npx clawhub@latest install npkill
镜像加速npx clawhub@latest install npkill --registry https://cn.longxiaskill.com✓ 镜像可用