360 Secure SkillHub
360 安全技能中心

Archive and Integrity Toolbox

用于归档与完整性校验:可只读盘点 ZIP/TAR 内容和解压后大小,校验路径、重复项、链接与总展开量后解压到新目录,按显式文件清单创建 ZIP,并返回逐文件 SHA256 回执;不执行解压内容,也不支持加密 ZIP 等高风险条目。

分类:效率
hznetnewpower
hznetnewpower
热度 2.46
最近更新 2026-10-27 04:20:54

安装

发给 Agent
帮我安装这个技能:npx secure-skills-cli add hznetnewpower/mochi-archive-desk
兼容性
通用兼容
联网要求
不联网
数据出网
数据不出本机
Metadata
name
mochi-archive-desk
description
Inspect ZIP/TAR contents, extract into new folders, create ZIPs from selected files and report per-file integrity hashes. Use for Archive and Integrity Toolbox.
metadata
{"openclaw":{"requires":{"anyBins":["python3","python"]},"homepage":"https://mochilab.bz","version":"1.0.1"}}

Archive and Integrity Toolbox

Run a job

Use Python 3.10+ in the current agent workspace. Install scripts/requirements.txt into a dedicated virtual environment when it is nonempty. Credentials are private host configuration, not dependencies. Save the requested action as workspace-local JSON, then run:

python3 "{baseDir}/scripts/run.py" --workspace "CURRENT_AGENT_WORKSPACE" --input "request.json"

Read the JSON ok/result receipt; a failed command is not a completed operation. Paths are workspace-relative except an explicitly supplied private connection profile. Agents have separate workspaces and separate state. Never use another agent's workspace just because it has a working account. Data and notifications persist under .mochilab. Do not upload those private state folders with a Skill package.

Use for actual archive inspection, selective file packaging and integrity receipts. inspect inventories paths and expanded sizes without extracting. extract validates portable paths, duplicates, links and total expansion, decompresses all data successfully, then writes into a new directory. The result lists each file's SHA256. create uses the exact explicit input list and verifies the resulting ZIP CRCs. Source files are preserved.

ZIP and ordinary TAR/TAR.GZ/TAR.BZ2/TAR.XZ archives are supported by Python's standard library. Encrypted ZIP, links, devices, duplicate/case-colliding names and Windows reserved names are rejected. Extract to a new directory and review the returned manifest before opening untrusted files. This is a file tool, not an instruction to execute extracted content. It does not install packages or restore a live service.

User guide · Simplified Chinese guide