
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
openclawsetup
Advanced tools
OpenClaw 智能安装向导 - 调用官方 openclaw onboard 交互界面,自动选择推荐配置。
openclaw onboard 命令,用户看到完整的原版安装界面--manual 参数可切换到完全手动模式macOS / Linux:
curl -fsSL https://unpkg.com/openclawsetup@latest/install.sh | bash
Windows PowerShell:
irm https://unpkg.com/openclawsetup@latest/install.ps1 | iex
npx openclawsetup@latest
npx openclawsetup@latest
自动完成以下选择(按任意键可接管):
npx openclawapi 配置)npx openclawdc 或 npx openclaw-chat-cn@latest feishu 配置)npx openclawsetup@latest --manual
完全交互,自己选择所有配置项。
npx openclawsetup@latest --auto
自动应答不可用时将直接退出(适合脚本化场景)。
| 参数 | 说明 |
|---|---|
--manual | 手动模式,不自动选择 |
--auto | 强制自动模式(不可用则退出) |
--with-model | 检测到模型配置时暂停自动选择 |
--with-channel | 检测到渠道配置时暂停自动选择 |
--optimize-token | 一键优化输入 token(记忆/召回瘦身) |
--strong | 与 --check/--fix 组合,启用强力检查策略 |
--strong-fix | 直接执行强力检查修复(多轮深度修复) |
--collect-evidence / --evidence | 一键导出脱敏排障证据包(给技术支持) |
--evidence-quick | 快速证据包(跳过深度检查) |
--update | 检查并更新已安装的 OpenClaw |
--reinstall | 卸载后重新安装(清除配置) |
--uninstall | 卸载 OpenClaw |
--help, -h | 显示帮助信息 |
# 一步进入强力修复(推荐)
npx openclawsetup@latest --strong-fix
# 或在常规命令上叠加强力策略
npx openclawsetup@latest --fix --strong
npx openclawsetup@latest --check --strong
强力模式会额外执行:
doctor --fix + onboard 深度回收管理菜单也提供 3. 强力检查修复。
# 命令行直接执行
npx openclawsetup@latest --optimize-token
也可在菜单里显式选择:
4. Token 优化(降低输入 token)默认会自动优化:
memory.collections.conversations.retention_days = 14memory.collections.conversations.max_entries = 2000memory.collections.conversations.summarize_threshold = 25memory.retrieval.default_limit = 4memory.retrieval.similarity_threshold = 0.82脚本会先备份原配置,再写入新配置并尝试重启 Gateway。
可直接复制发送给用户:
请复制执行:npx openclawsetup@latest --collect-evidence,完成后把桌面上 openclaw-evidence-... 文件夹或 .tar.gz 发给我即可。
让用户只执行一条命令:
npx openclawsetup@latest --collect-evidence
脚本会自动:
.tar.gz(macOS/Linux)你只需要让用户把生成的目录或压缩包发回来即可。
若用户机器性能较弱,可用快速模式:
npx openclawsetup@latest --evidence-quick
# macOS/Linux - 一键脚本
curl -fsSL https://unpkg.com/openclawsetup@latest/install.sh | bash
# 或者 npx
npx openclawsetup@latest
npx openclawsetup@latest --manual
# 检查并更新
npx openclawsetup@latest --update
# 卸载后重新安装(会清除配置)
npx openclawsetup@latest --reinstall
# 直接卸载
npx openclawsetup@latest --uninstall
安装完成后,需要配置 AI 模型才能使用:
# 配置 Claude 模型(推荐)
npx openclawapi@latest preset-claude
# 或交互式配置
npx openclawapi@latest
安装完成后会自动显示:
# Discord
npx openclawdc
# 飞书
npx openclaw-chat-cn@latest feishu
# 查看状态
openclaw status
# 查看日志
openclaw gateway logs
# 重启服务
openclaw gateway restart
# 诊断问题
openclaw doctor
openclaw npm 包openclaw onboard 的非交互参数(可用时直接自动完成)node-pty 创建伪终端进行自动应答(按任意键接管)| 提示类型 | 自动选择 |
|---|---|
| 安全确认 | 同意 (y) |
| Setup 模式 | QuickStart |
| Model Provider | 跳过 (s) |
| API Key | 跳过 |
| Channel 配置 | 跳过 (s) |
| Skills | 跳过 (s) |
| Daemon/Service | 安装 (y) |
| UI 选择 | Web Dashboard |
使用
--with-model/--with-channel时,自动模式会在对应步骤暂停并交给用户操作。
# 1. 停止服务
openclaw gateway stop
# 2. 卸载 CLI
npm uninstall -g openclaw
# 3. 删除配置
rm -rf ~/.openclaw
# 4. 删除服务配置
# macOS
rm ~/Library/LaunchAgents/com.openclaw.gateway.plist
# Linux
rm ~/.config/systemd/user/openclaw.service
systemctl --user daemon-reload
MIT
FAQs
OpenClaw 安装向导 - 智能安装、诊断、自动修复
We found that openclawsetup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.