harbor-skillsHarbor 镜像仓库综合管理技能。用于 Harbor 日常运维、项目与镜像管理、安全扫描、清理策略、CI/CD 集成、GitOps、复制规则、存储管理、备份恢复、webhook 联动等所有 Harbor 相关操作。当用户提到 Harbor、镜像仓库管理、Docker 镜像、镜像安全扫描、CI/CD 镜像推送/拉...
Install via ClawdBot CLI:
clawdbot install qiutoo/harbor-skillsGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://harbor.mycompany.com/api/v2.0/tokensAccesses system directories or attempts privilege escalation
/var/log/Calls external URL not in known-safe list
https://harbor.mycompany.com`Uses known external API (expected, informational)
raw.githubusercontent.comGenerated May 23, 2026
Harbor管理员通过curl命令或脚本检查Harbor健康状态、管理项目（创建、修改存储配额）、查看镜像列表及详情、配置垃圾回收和清理策略，确保镜像仓库稳定运行。
开发团队在CI/CD流水线中自动构建Docker镜像并推送到Harbor项目（如my-app），部署时从Harbor拉取指定标签的镜像，实现自动化部署流程。
安全团队通过Harbor的API获取镜像扫描概览，识别漏洞，并基于扫描结果配置清理策略（如删除存在高危漏洞且非关键标签的镜像），确保容器镜像安全合规。
利用Harbor复制管理功能，创建从主站点到灾备站点的定时复制规则，在灾难发生时可从灾备Harbor拉取镜像，保证业务连续性。
在GitOps工作流中，通过Harbor的清理策略（如保留最新5个版本）自动管理镜像版本，结合Webhook通知Kubernetes集群进行部署更新，实现基础设施即代码。
企业IT部门搭建Harbor为内部各开发团队提供统一镜像仓库服务，按项目分配存储配额和访问权限，通过资源复用降低基础设施成本。
提供跨云（AWS、Azure、GCP或私有云）的镜像复制与缓存服务，用户按存储量和复制流量付费，适用于多云部署客户。
结合Harbor扫描功能，提供镜像安全报告和合规性审计服务，定期输出报告，帮助客户通过行业合规检查。
💬 Integration Tip
集成时优先使用API Token而非密码认证，并建议在脚本中引用环境变量（如HARBOR_URL）以增强安全性。可结合CI工具（如Jenkins/GitLab CI）预填变量实现自动化运维。
Scored Jul 14, 2026
AI Analysis
The skill interacts with Harbor API endpoints as documented for its stated purpose of Harbor management, with no evidence of credential harvesting or hidden malicious instructions. The external API calls to harbor.mycompany.com are expected for this skill's functionality, and the reference to raw.githubusercontent.com appears to be for documentation. However, the skill does send authentication credentials to external servers, which is inherent to its purpose but represents a typical API integration risk.
Audited Apr 18, 2026 · audit v1.0
Control remote Windows machines via SSH. Use when executing commands on Windows, checking GPU status (nvidia-smi), running scripts, or managing remote Windows systems. Triggers on "run on Windows", "execute on remote", "check GPU", "nvidia-smi", "远程执行", "Windows 命令".
Perform reverse lookup of gTLD domains hosted on a specified nameserver with optional filters by TLD and domain prefix length.
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
Connect to remote desktops via RDP, VNC, and SSH X11 with secure tunneling and troubleshooting.
Essential curl commands for HTTP requests, API testing, and file transfers.
Deploy and manage Vercel projects. Use when deploying applications to Vercel, managing environment variables, checking deployment status, viewing logs, or performing Vercel operations. Supports production and preview deployments. Practical infrastructure operations - no "AI will build your app" magic.