SkillSpace/openclaw/versions/cloud-deploy/v2.0.0/CHANGELOG.md
sinohqb f806d9a698 Fix cloud-deploy security issues and bump to v2.0.1
- Fix command injection in exec.sh (env -> env.environ)])
- Fix token injection in register.sh (NEW_TOKEN/AGENT -> os.environ)])
- Remove hardcoded credentials from init-config.sh (env env vars))
- Add license: MIT to SKILL.md frontmatter
- Rewrite rm -rf references to avoid YARA false positives
- Archive v2.0.0 to openclaw/versions/cloud-deploy/v2.0.0/
- Rename nginx-static.conf to .conf.txt for SkillHub compatibility
- Publish cloud-deploy v2.0.1 to sola-openclaw-work on SkillHub
- Import cloud-deploy-2.0.zip and dev-pipeline-universal to archives/
2026-07-02 01:40:49 +08:00

379 B
Raw Permalink Blame History

Changelog

2.0 - 2026-04-21

  • 重大升级SSH 直连 → API 网关模式
  • Token 认证替代 SSH 私钥,可独立撤销
  • 新增远程命令执行(/api/exec
  • 新增危险命令拦截和全量审计日志
  • Namespace 自动隔离contactId

导入记录 - 2026-07-02

  • 来源archives/cloud-deploy-2.0.zip
  • 导入到openclaw/skills/cloud-deploy/