📦 Tar — 打包解压
v3.0.1在本地或容器内快速创建、提取、列出并压缩 tar 归档,支持 tar/tar.gz/tar.bz2 等格式,自动扫描归档内容、监控体积、生成报告并发现损坏文件,一键完成备份与分发。
0· 233·1 当前·1 累计
下载技能包
最后更新
2026/3/19
安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-backed shell wrapper around standard tar/file utilities; its requirements, instructions, and included script are coherent with the stated purpose and request no unrelated credentials or installs.
评估建议
This skill is a simple shell wrapper around the system tar and related utilities and appears to do what it says. Before installing/using: (1) inspect scripts/script.sh yourself (it's executed locally); (2) ensure tar/file are the expected system binaries; (3) avoid extracting untrusted archives in sensitive directories — tar can contain absolute paths or ../ entries and may overwrite files; (4) be cautious when passing untrusted filenames or patterns (shell/tar/grep will process them); and (5) r...详细分析 ▾
✓ 用途与能力
Name, description, SKILL.md commands, and the included scripts all implement archive creation, listing, extraction, inspection, diffing and verification using system tar/file utilities — the requested capabilities align with the stated purpose.
✓ 指令范围
SKILL.md directs the agent to run the bundled scripts/script.sh with explicit subcommands; the script only operates on provided archive paths and uses standard local utilities. It does not reference external endpoints, secrets, or unrelated system paths. Note: extracting untrusted archives may cause path traversal or overwrite issues because tar is invoked without sandboxing — this is a usage/security caveat, not an incoherence.
✓ 安装机制
No install spec or network downloads are present; the skill is instruction-only with a local script, so nothing is fetched or written to disk by an installer.
✓ 凭证需求
The skill requires no environment variables or credentials. The script uses common utilities (tar, file, du, stat, grep, sort, comm) which are appropriate for an archive tool.
✓ 持久化与权限
always is false and the skill does not modify other skills or system-wide agent settings. It does not request persistent presence or elevated privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv3.0.12026/3/16
v3.0.1: SKILL.md rewritten to match new script commands.
● 无害
安装命令
点击复制官方npx clawhub@latest install tar
镜像加速npx clawhub@latest install tar --registry https://cn.longxiaskill.com