📦 unzip-all — 递归解压压缩包
v1.0.0一次性递归解压目录内所有 zip/7z/rar 压缩包，智能处理中文文件名与多层嵌套结构，省去手动逐层解压烦恼。
0· 116·0 当前·0 累计
by @tang-dafa下载技能包
最后更新
2026/3/26
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do exactly what it says, but take precautions before using it on important data:
- Backup your archives or test the skill on a copy first — the script deletes original archives after successful extraction.
- The zip extraction does not sanitize archive member names (no zip-slip protection). Malicious archives could write files outside the target folder; avoid running this on untrusted archives or add path-sanitization checks (ensure final paths are under the extraction dire...详细分析 ▾
✓ 用途与能力
Name/description match the included script: the Python script recursively extracts .zip/.7z/.rar files and handles GBK-encoded Chinese filenames. Required capabilities (7‑Zip for .7z/.rar) are documented in SKILL.md.
ℹ 指令范围
SKILL.md instructs the agent to extract files or folders and documents behavior (recursive extraction, GBK handling, and deleting originals). Nothing in the instructions or code attempts to read unrelated user files, call external network endpoints, or access unrelated credentials. Two operational risks: (1) the script deletes original archives after successful extraction (documented, but destructive), and (2) the zip extraction lacks protection against path traversal (zip-slip), so a malicious archive could write files outside the intended folder.
✓ 安装机制
Instruction-only skill with an included Python script and no install spec. No downloads or third-party install steps are performed by the skill itself.
✓ 凭证需求
The skill requests no environment variables or credentials. It does access the Windows registry to find 7z.exe (to locate 7‑Zip), which is reasonable for the stated Windows-targeted behavior but is not declared as an OS restriction.
✓ 持久化与权限
No 'always' flag and no code that modifies other skills or agent-wide configuration. The skill runs only when invoked.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install unzip-all
镜像加速npx clawhub@latest install unzip-all --registry https://cn.longxiaskill.com