@pwddd/skills-scanner 1.2.0 → 1.2.4

package/index.ts

@@ -30,7 +30,8 @@ import { promisify } from "util";
 
 const execAsync = promisify(exec);
 
-const PLUGIN_ROOT  = __dirname;
+// 使用绝对路径，避免 __dirname 的问题
+const PLUGIN_ROOT  = process.env.OPENCLAW_PLUGIN_ROOT || __dirname;
 const SKILL_DIR    = join(PLUGIN_ROOT, "skills", "skills-scanner");
 const VENV_PYTHON  = join(SKILL_DIR, ".venv", "bin", "python");
 const SCAN_SCRIPT  = join(SKILL_DIR, "scan.py");
@@ -198,10 +199,31 @@ async function runScan(
   if (opts.jsonOut)    args.push("--json", opts.jsonOut);
 
   const cmd = `"${VENV_PYTHON}" "${SCAN_SCRIPT}" ${args.map(a => `"${a}"`).join(" ")}`;
+  
+  // 调试日志
+  console.log(`[skills-scanner] 执行命令: ${cmd}`);
+  console.log(`[skills-scanner] VENV_PYTHON: ${VENV_PYTHON}`);
+  console.log(`[skills-scanner] SCAN_SCRIPT: ${SCAN_SCRIPT}`);
+  console.log(`[skills-scanner] Python 存在: ${existsSync(VENV_PYTHON)}`);
+  console.log(`[skills-scanner] Script 存在: ${existsSync(SCAN_SCRIPT)}`);
+  
   try {
-    const { stdout, stderr } = await execAsync(cmd, { timeout: 180_000 });
+    // 清除代理环境变量，避免 LiteLLM 加载时出错
+    const env = { ...process.env };
+    delete env.http_proxy;
+    delete env.https_proxy;
+    delete env.HTTP_PROXY;
+    delete env.HTTPS_PROXY;
+    delete env.all_proxy;
+    delete env.ALL_PROXY;
+    
+    const { stdout, stderr } = await execAsync(cmd, { 
+      timeout: 180_000,
+      env 
+    });
     return { exitCode: 0, output: (stdout + stderr).trim() };
   } catch (err: any) {
+    console.error(`[skills-scanner] 命令执行失败: ${err.message}`);
     return { exitCode: err.code ?? 1, output: (err.stdout + err.stderr || "").trim() || err.message };
   }
 }
@@ -364,8 +386,11 @@ export default function register(api: any) {
 
   api.logger.info("[skills-scanner] ═══════════════════════════════════════");
   api.logger.info("[skills-scanner] Plugin 正在加载...");
+  api.logger.info(`[skills-scanner] PLUGIN_ROOT: ${PLUGIN_ROOT}`);
+  api.logger.info(`[skills-scanner] SKILL_DIR: ${SKILL_DIR}`);
+  api.logger.info(`[skills-scanner] VENV_PYTHON: ${VENV_PYTHON}`);
+  api.logger.info(`[skills-scanner] SCAN_SCRIPT: ${SCAN_SCRIPT}`);
   api.logger.info(`[skills-scanner] 扫描目录: ${scanDirs.join(", ")}`);
-  api.logger.info(`[skills-scanner] Python venv 路径: ${VENV_PYTHON}`);
   api.logger.info(`[skills-scanner] Python 依赖状态: ${isVenvReady() ? "✅ 已就绪" : "❌ 未安装"}`);
 
   // 立即尝试安装依赖（不等待 service start）
@@ -463,7 +488,18 @@ export default function register(api: any) {
     handler: async (ctx: any) => {
       const raw = (ctx.args ?? "").trim();
       if (!raw) return { text: "用法：`/scan-skill <路径> [--detailed] [--behavioral]`" };
-      if (!isVenvReady()) return { text: "⏳ Python 依赖尚未就绪，请稍后重试" };
+      
+      // 先检查依赖
+      if (!isVenvReady()) {
+        return { text: "⏳ Python 依赖尚未就绪，请稍后重试或查看日志" };
+      }
+      
+      // 测试 Python 能否导入
+      try {
+        execSync(`"${VENV_PYTHON}" -c "import skill_scanner; print('Import OK')"`, { encoding: 'utf-8' });
+      } catch (err: any) {
+        return { text: `❌ Python 导入测试失败:\n\`\`\`\n${err.message}\n\`\`\`` };
+      }
 
       const parts      = raw.split(/\s+/);
       const skillPath  = expandPath(parts.find(p => !p.startsWith("--")) ?? "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pwddd/skills-scanner",
-  "version": "1.2.0",
+  "version": "1.2.4",
   "description": "OpenClaw Plugin：Skills 安全扫描、安装前拦截、安全日报",
   "main": "index.ts",
   "files": [

package/skills/skills-scanner/scan.py

@@ -24,9 +24,23 @@ try:
         BehavioralAnalyzer,
         PipelineAnalyzer,
     )
-except ImportError:
+except ImportError as e:
     print("❌ cisco-ai-skill-scanner 未安装。")
+    print(f"   导入错误: {e}")
     print("   请运行: uv pip install cisco-ai-skill-scanner")
+    print(f"   Python 路径: {sys.executable}")
+    print(f"   Python 版本: {sys.version}")
+    
+    # 尝试显示 sys.path
+    print("   sys.path:")
+    for p in sys.path:
+        print(f"     - {p}")
+    
+    sys.exit(1)
+except Exception as e:
+    print(f"❌ 导入时发生未知错误: {type(e).__name__}: {e}")
+    import traceback
+    traceback.print_exc()
     sys.exit(1)