技能 skill-installer
📦
skill-installer
内容修订 r2 高风险 🌐 网络访问🔑 环境变量⚙️ 外部命令📁 文件系统访问
从 GitHub 安装 Codex Skills
开发者需要一种可重复的方式来发现并添加 Codex skills。此 skill 会列出精选选项，并将选定的 skills 从 GitHub 安装到本地 skills 文件夹中。
支持: Claude Codex Code(CC)
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "skill-installer" from https://skillstore.io/skills/skill-installer.md and its manifest at https://skillstore.io/api/skills/skill-installer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“skill-installer”。 List curated skills.
预期结果:
助手会显示一个精选 skills 的编号列表，并标记已经安装的条目。
正在使用“skill-installer”。 Install a skill from a GitHub tree URL.
预期结果:
助手会运行安装器，报告已安装的 skill 路径，并告知用户重启 Codex。
正在使用“skill-installer”。 Install from a private repository.
预期结果:
助手会使用可用凭据，在需要时回退到 git，并清楚报告任何权限错误。
安全审计
高风险v9 • 2026/8/17 打开版本化报告
The skill intentionally uses GitHub networking, optional tokens, Git subprocesses, and filesystem writes to install skills. Most Markdown, SVG, path-string, and guarded archive findings are false positives. Arbitrary remote skill content is copied into the active skills directory without trust verification, creating a supply-chain risk.
7
已扫描文件
711
分析行数
34
复核项
0
已忽略误报
已确认安全问题 (2)
高
SKILL.md:14-17scripts/install-skill-from-github.py:164-176scripts/install-skill-from-github.py:269-295
Unreviewed Remote Skill Installation
The installer copies arbitrary GitHub skill content into the active skills directory after checking only for SKILL.md. It does not verify publisher trust, signatures, or content safety.
The validation and copy flow is explicit, and no trust or content-review control exists.
中
Unbounded Download and Archive Extraction
The HTTP helper reads complete responses into memory, and archive extraction has no size or file-count limits. Large repositories can exhaust memory or disk.
The response is buffered without a cap, and extraction performs no quota checks.
能力复核项 (34)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Git platform tokens
token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN")
The code intentionally reads a documented environment variable for configuration or GitHub authentication.
高
Python subprocess.run
result = subprocess.run(args, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
The installer intentionally invokes Git with an argument list and without a shell.
高
Hidden file in home directory
return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
The code intentionally reads or modifies local paths while listing or installing skills.
高
Hidden file in home directory
return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
The code intentionally reads or modifies local paths while listing or installing skills.
中
Hidden file access
return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python file write/append
with open(zip_path, "wb") as file_handle:
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python shutil operations
shutil.copytree(src, dest_dir)
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python shutil operations
shutil.rmtree(tmp_dir, ignore_errors=True)
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python os file operations
os.makedirs(base, exist_ok=True)
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python os file operations
os.makedirs(os.path.dirname(dest_dir), exist_ok=True)
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python archive libraries
import zipfile
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python archive libraries
with zipfile.ZipFile(zip_path, "r") as zip_file:
The code intentionally reads or modifies local paths while listing or installing skills.
中
Python archive libraries
def _safe_extract_zip(zip_file: zipfile.ZipFile, dest_dir: str) -> None:
The code intentionally reads or modifies local paths while listing or installing skills.
中
Hidden file access
return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
The code intentionally reads or modifies local paths while listing or installing skills.
低
HTTP client library
def github_request(url: str, user_agent: str) -> bytes:
The code intentionally contacts GitHub to list or download skill content.
低
Python HTTP libraries
import urllib.request
The code intentionally contacts GitHub to list or download skill content.
低
Python HTTP libraries
req = urllib.request.Request(url, headers=headers)
The code intentionally contacts GitHub to list or download skill content.
低
Python HTTP libraries
with urllib.request.urlopen(req) as resp:
The code intentionally contacts GitHub to list or download skill content.
低
Hardcoded URL
return f"https://api.github.com/repos/{repo}/contents/{path}?ref={ref}"
The code intentionally contacts GitHub to list or download skill content.
低
Python environment access
token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN")
The code intentionally reads a documented environment variable for configuration or GitHub authentication.
低
HTTP client library
def _request(url: str) -> bytes:
The code intentionally contacts GitHub to list or download skill content.
低
HTTP client library
return github_request(url, "codex-skill-install")
The code intentionally contacts GitHub to list or download skill content.
低
HTTP client library
payload = _request(zip_url)
The code intentionally contacts GitHub to list or download skill content.
低
Hardcoded URL
zip_url = f"https://codeload.github.com/{owner}/{repo}/zip/{ref}"
The code intentionally contacts GitHub to list or download skill content.
低
Hardcoded URL
return f"https://github.com/{owner}/{repo}.git"
The code intentionally contacts GitHub to list or download skill content.
低
Temp file creation
import tempfile
The code intentionally reads or modifies local paths while listing or installing skills.
低
Temp file creation
base = os.path.join(tempfile.gettempdir(), "codex")
The code intentionally reads or modifies local paths while listing or installing skills.
低
Temp file creation
tmp_dir = tempfile.mkdtemp(prefix="skill-install-", dir=_tmp_root())
The code intentionally reads or modifies local paths while listing or installing skills.
低
Python environment access
return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
The code intentionally reads a documented environment variable for configuration or GitHub authentication.
低
HTTP client library
def _request(url: str) -> bytes:
The code intentionally contacts GitHub to list or download skill content.
低
HTTP client library
return github_request(url, "codex-skill-list")
The code intentionally contacts GitHub to list or download skill content.
低
HTTP client library
payload = _request(api_url)
The code intentionally contacts GitHub to list or download skill content.
低
Hardcoded URL
f"https://github.com/{repo}/tree/{ref}/{path}"
The code intentionally contacts GitHub to list or download skill content.
低
Python environment access
return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
The code intentionally reads a documented environment variable for configuration or GitHub authentication.
风险因素
🌐 网络访问 (20)
assets/skill-installer-small.svg:2 scripts/github_utils.py:10 scripts/github_utils.py:7 scripts/github_utils.py:15 scripts/github_utils.py:16 scripts/github_utils.py:21 scripts/install-skill-from-github.py:55 scripts/install-skill-from-github.py:56 scripts/install-skill-from-github.py:84 scripts/install-skill-from-github.py:81 scripts/install-skill-from-github.py:180 scripts/install-skill-from-github.py:250 scripts/list-skills.py:30 scripts/list-skills.py:31 scripts/list-skills.py:53 scripts/list-skills.py:58 SKILL.md:10 SKILL.md:40 SKILL.md:54 SKILL.md:57
🔑 环境变量 (5)
⚙️ 外部命令 (15)
📁 文件系统访问 (26)
scripts/install-skill-from-github.py:46 scripts/install-skill-from-github.py:46 scripts/install-skill-from-github.py:12 scripts/install-skill-from-github.py:50 scripts/install-skill-from-github.py:279 scripts/install-skill-from-github.py:87 scripts/install-skill-from-github.py:176 scripts/install-skill-from-github.py:298 scripts/install-skill-from-github.py:51 scripts/install-skill-from-github.py:173 scripts/install-skill-from-github.py:15 scripts/install-skill-from-github.py:89 scripts/install-skill-from-github.py:105 scripts/install-skill-from-github.py:112 scripts/list-skills.py:35 scripts/list-skills.py:15 scripts/list-skills.py:35 scripts/list-skills.py:74 SKILL.md:48 SKILL.md:10 SKILL.md:13 SKILL.md:38 SKILL.md:41 SKILL.md:48 SKILL.md:54 SKILL.md:57
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/skill-installer/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/skill-installer?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/skill-installer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skill-installer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/skill-installer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
openai. (2026). skill-installer security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skill-installer/audits/9BibTeX 引用
@techreport{openai-skill-installer-2026,
author = {openai},
title = {skill-installer security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/skill-installer/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-installer security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "openai"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/skill-installer/audits/9"
identifiers:
- type: other
value: "skillstore:skill-installer:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 高 59
架构
85
可维护性
85
内容
74
社区
83
规范符合性
你能构建什么
添加精选生产力 skill
查找可用的精选 skills，并将其中一个安装到默认 Codex skills 目录。
部署内部 skill
使用现有凭据，从团队拥有的私有 GitHub 仓库安装 skill。
准备托管工作站
在设置期间，将多个已批准的 skills 安装到指定的 skills 目录中。
试试这些提示
列出精选 Skills
列出可用的精选 Codex skills，并显示哪些已经安装。
安装精选 Skill
Install the curated skill named documentation-helper into my default Codex skills folder.
从私有仓库安装
Install the skill at skills/release-notes from my private GitHub repository acme/internal-skills.
从分支安装多个路径
Install skills/linting and skills/code-review from acme/dev-skills using the release branch and git method.
最佳实践
- 仅从你信任且可以审查的仓库安装 skills。
- 需要私有访问权限时，使用只读或细粒度的 GitHub 凭据。
- 安装后重启 Codex，以便干净地加载新 skill。
避免
- 不要在未审查文件的情况下，从未知仓库安装 skills。
- 当只读访问已足够时，不要使用权限过宽的 GitHub token。
- 除非你有意替换现有 skill 目录，否则不要覆盖它们。
常见问题
这个 skill 会安装什么？
它会安装包含 SKILL.md 文件的 Codex skill 目录。
它可以从私有 GitHub 仓库安装吗？
可以。它可以使用现有 git 凭据或环境中的 GitHub token。
默认情况下 skills 安装在哪里？
它们会安装在 CODEX_HOME skills 下；如果未设置 CODEX_HOME，则安装在默认 Codex home 目录下。
它会立即执行已安装的 skills 吗？
不会。用户必须重启 Codex，已安装的 skills 才会被加载。
它可以一次安装多个 skill 吗？
可以。一次安装请求中可以提供多个仓库路径。
它会验证 skill 安全性吗？
不会。它会检查 SKILL.md，但用户应在安装前审查 skill 指令和脚本。
开发者详情
作者
openai许可证
MIT
Skillstore 修订
r2
版本提示
作者未声明版本。
引用
bc37f12c64ad89ca965c1e90d44012af0469ec4e
维护新鲜度
2026/8/17
使用量
143 次下载 · 444 次浏览