How do I install the Qclaw Asar Hotfix skill?

Run npx skillmds@latest add tangchunwu/qclaw-asar-hotfix in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Qclaw Asar Hotfix safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Qclaw Asar Hotfix?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Qclaw Asar Hotfix free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Qclaw Asar Hotfix?

tangchunwu (@tangchunwu) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Qclaw Asar Hotfix by tangchunwu — Agent Skill

Name: Qclaw Asar Hotfix
Rating: 4.2 (5 reviews)
Author: tangchunwu

Qclaw Asar Hotfix

Patch packaged QClaw.app (no source code) by modifying app.asar frontend bundles. Use when users have older QClaw versions and need to: (1) make invite-code checks only active on localhost with DEV_MODE=true and bypassed in production, (2) remove visibility restrictions for `other` and `system-config` model providers, and (3) ensure these providers appear in the model vendor dropdown.

tangchunwu Updated Aug 19, 2026 1 repo stars

File contents

QClaw Asar Hotfix

Overview

Use this skill when the user only has a packaged QClaw.app and needs the same frontend hotfix across old versions.

This skill ships one deterministic patcher script:

scripts/patch_qclaw_asar.py

Workflow

Run patch in non-destructive mode first.

python3 /Users/tangchunwu/.codex/skills/qclaw-asar-hotfix/scripts/patch_qclaw_asar.py \
  --app /Applications/QClaw.app \
  --output ~/Desktop/app.asar.patched \
  --no-install

If patch summary looks correct, apply to the app in place.

python3 /Users/tangchunwu/.codex/skills/qclaw-asar-hotfix/scripts/patch_qclaw_asar.py \
  --app /Applications/QClaw.app

Ask the user to fully quit and reopen QClaw.

What The Script Patches

Invite-code gate in chat/login frontend:
- Enable check only when location.hostname=="localhost" && localStorage.DEV_MODE==="true"
- Bypass in production/non-localhost
Model provider visibility:
- Remove frontend filters that hide system-config
- Add other provider option to model vendor dropdown when missing
- Ensure provider sets/maps include other and system-config

Validation Checklist

After patching, verify by extracting the output asar and checking these expectations:

Invite code gate is DEV_MODE-local only.
Model-setting provider list includes both other and 用户系统配置.
No residual filter like filter(k=>k.key!==vn) for provider visibility.

Suggested checks:

TMP=$(mktemp -d)
cd "$TMP"
npx -y @electron/asar extract /Applications/QClaw.app/Contents/Resources/app.asar ext
rg -n -F 'localStorage.getItem("DEV_MODE")==="true"' ext/out/renderer/assets/*.js
rg -n -F 'key:"other",label:"其他"' ext/out/renderer/assets/*.js
rg -n -F 'key:vn,label:"用户系统配置"' ext/out/renderer/assets/*.js
rg -n -F 'l.filter(k=>k.key!==vn)' ext/out/renderer/assets/*.js || true

Rollback

The script creates a backup next to app.asar:

app.asar.bak.hotfix.<timestamp>

Rollback command:

cp /Applications/QClaw.app/Contents/Resources/app.asar.bak.hotfix.<timestamp> \
   /Applications/QClaw.app/Contents/Resources/app.asar

Notes

Prefer running with --no-install first for unknown versions.
If script reports 未匹配到可修改的补丁位点, inspect out/renderer/assets/*.js and extend patch literals/regex in scripts/patch_qclaw_asar.py.
Keep edits scoped to renderer bundles; do not modify binary/executable files.

---name: qclaw-asar-hotfixdescription: "Patch packaged QClaw.app (no source code) by modifying app.asar frontend bundles. Use when users have older QClaw versions and need to: (1) make invite-code checks only active on localhost with DEV_MODE=true and bypassed in production, (2) remove visibility restrictions for `other` and `system-config` model providers, and (3) ensure these providers appear in the model vendor dropdown."---# QClaw Asar Hotfix## OverviewUse this skill when the user only has a packaged `QClaw.app` and needs the same frontend hotfix across old versions.This skill ships one deterministic patcher script:- `scripts/patch_qclaw_asar.py`## Workflow1. Run patch in non-destructive mode first.```bashpython3 /Users/tangchunwu/.codex/skills/qclaw-asar-hotfix/scripts/patch_qclaw_asar.py \ --app /Applications/QClaw.app \ --output ~/Desktop/app.asar.patched \ --no-install```2. If patch summary looks correct, apply to the app in place.```bashpython3 /Users/tangchunwu/.codex/skills/qclaw-asar-hotfix/scripts/patch_qclaw_asar.py \ --app /Applications/QClaw.app```3. Ask the user to fully quit and reopen QClaw.## What The Script Patches- Invite-code gate in chat/login frontend: - Enable check only when `location.hostname=="localhost" && localStorage.DEV_MODE==="true"` - Bypass in production/non-localhost- Model provider visibility: - Remove frontend filters that hide `system-config` - Add `other` provider option to model vendor dropdown when missing - Ensure provider sets/maps include `other` and `system-config`## Validation ChecklistAfter patching, verify by extracting the output asar and checking these expectations:1. Invite code gate is DEV_MODE-local only.2. Model-setting provider list includes both `other` and `用户系统配置`.3. No residual filter like `filter(k=>k.key!==vn)` for provider visibility.Suggested checks:```bashTMP=$(mktemp -d)cd "$TMP"npx -y @electron/asar extract /Applications/QClaw.app/Contents/Resources/app.asar extrg -n -F 'localStorage.getItem("DEV_MODE")==="true"' ext/out/renderer/assets/*.jsrg -n -F 'key:"other",label:"其他"' ext/out/renderer/assets/*.jsrg -n -F 'key:vn,label:"用户系统配置"' ext/out/renderer/assets/*.jsrg -n -F 'l.filter(k=>k.key!==vn)' ext/out/renderer/assets/*.js || true```## RollbackThe script creates a backup next to `app.asar`:- `app.asar.bak.hotfix.<timestamp>`Rollback command:```bashcp /Applications/QClaw.app/Contents/Resources/app.asar.bak.hotfix.<timestamp> \ /Applications/QClaw.app/Contents/Resources/app.asar```## Notes- Prefer running with `--no-install` first for unknown versions.- If script reports `未匹配到可修改的补丁位点`, inspect `out/renderer/assets/*.js` and extend patch literals/regex in `scripts/patch_qclaw_asar.py`.- Keep edits scoped to renderer bundles; do not modify binary/executable files.

Frequently asked questions