技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 1 · 107 · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：aichiafranco/windows-healing-gateway
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's purpose (Windows Task Scheduler-based self-healing) matches most instructions, but it directs installing persistent scheduled tasks that run PowerShell scripts which are not included in the package, and it references/expects sensitive API keys (MOONSHOT_API_KEY, CODING_PLAN_KEY, Telegram tokens) that are not declared in the metadata — these mismatches and missing artifacts make the package questionable until the scripts and key usa…
目的
High-level purpose (monitoring + auto-repair for OpenClaw Gateway using Task Scheduler) is consistent with the XML Task Scheduler manifests and README. However, the SKILL.md/README reference unspecified API keys (MOONSHOT_API_KEY, CODING_PLAN_KEY) and an 'AI Diagnosis' capability for which no service, endpoint, or justification is provided — those credentials are not declared in the skill metadata, which is unexpected.
说明范围
Runtime instructions tell the agent/user to install Task Scheduler tasks and to run PowerShell scripts (deploy-windows-healing.ps1, openclaw-fix.ps1, openclaw-monitor.ps1, etc.). The package contents shown do NOT include the PowerShell script sources, so the actual behavior of those persistent tasks cannot be audited. Instructions also use ExecutionPolicy Bypass and hidden execution, increasing risk if scripts are unreviewed.
安装机制
No formal install spec (instruction-only), which is lower-risk in isolation. Installation instructions point to ClawHub or a GitHub URL; there are minor inconsistencies (e.g., 'python ... .ps1' call looks incorrect). Because script files are missing from the provided manifest, the install process as documented would fetch or rely on external repository content — that makes auditing before execution impossible.
证书
SKILL.md/README instruct users to store several sensitive variables (MOONSHOT_API_KEY, CODING_PLAN_KEY, TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID) in ~/.config/openclaw/gateway.env, but the skill metadata declares no required env vars or primary credential. The purpose of the MOONSHOT and CODING_PLAN keys is unexplained; requiring undeclared secrets is disproportionate and opaque.
持久
The skill creates Task Scheduler entries that run at boot/logon and a monitor that runs periodically (every ~30s). Those scheduled tasks persist on the user's system independent of the skill and execute hidden PowerShell scripts. While persistence is expected for a self-healing agent, persistent hidden tasks combined with missing script sources and ExecutionPolicy Bypass are a notable risk.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「windows-healing-gateway」。简介：Automates monitoring and self-repair of OpenClaw Gateway on Windows using Task …。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aichiafranco/windows-healing-gateway/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。