⌘K
Change language Switch ThemeSign In
Narrow Mode
Claude Code's Technical Review and Risk Analysis of the Skillhub Plugin =======================================================================
Claude Code's Technical Review and Risk Analysis of the Skillhub Plugin =======================================================================  ### Orange AI
@oran_ge
附上 claude code 对这个插件的客观冷静专业的分析，一字未改，大家自己判断：
对 skillhub 做了静态审查，结论如下：
skillhub 不只是一个 skills 商店 CLI。它的安装包还会为 OpenClaw 自动安装并启用一个插件，该插件注册了 before_prompt_build 钩子，并通过 prependContext 在每次请求构建 prompt 前注入一段策略文本。
这段注入内容的作用，不是展示信息，而是引导 agent 在 skills 的搜索、安装、更新场景中优先使用 skillhub，仅在不可用时再回退到其他来源。
从技术上说，这更准确地属于一种持久化的 prompt / policy injection，而不是普通的本地工具安装。它会长期影响 agent 的默认决策路径，并带来额外的上下文与 token 开销。
需要说明的是，我目前没有看到"在每次回答结尾自动追加宣传文案"的证据；但"在每轮请求前向 prompt 注入偏向 Skillhub 的策略文本"这一点，是安装包代码中可以直接确认的。
如果一个工具会持续修改 agent 的 prompt 行为，我认为更合适的做法应当是：
在安装前明确披露
默认关闭，由用户主动启用
允许用户清楚查看注入内容
提供简单、完整的关闭或卸载方式
对于这类会改变模型行为边界的插件，透明性和显式同意应当是基本要求。Show More
Mar 13, 2026, 5:48 AM View on X
3 Replies
4 Retweets
18 Likes
5,739 Views  Orange AI @oran_ge
One Sentence Summary
This tweet reveals the technical details and transparency issues of the Skillhub plugin, which persistently influences AI Agent decision paths through prompt injection.
Summary
The tweet quotes Claude Code's static review conclusions on Skillhub. The analysis found that Skillhub is not just a CLI tool; its installer also automatically installs a plugin for OpenClaw. This plugin uses a before_prompt_build hook to inject policy text (Prompt Injection) before each request. This behavior aims to guide the agent to prioritize Skillhub in search and installation scenarios, not only increasing token overhead but also subtly altering the model's decision logic. The author uses this to emphasize fundamental principles that AI plugins should adhere to when modifying model behavior, such as transparency, explicit consent, and ease of uninstallation.
AI Score
82
Influence Score 6
Published At Today
Language
Chinese
Tags
Skillhub
OpenClaw
Prompt Injection
AI Agent
Technical Review HomeArticlesPodcastsVideosTweets
Claude Code's Technical Review and Risk Analysis of the S... ===============