by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requirements are consistent with its stated purpose of generating VietQR image URLs and do not request unrelated credentials, installs, or system access.
评估建议
This skill appears to be what it claims: a local Python script that builds VietQR image URLs. Before installing, ensure you are comfortable allowing the agent to run the included Python script locally. Verify any bank/account numbers are provided intentionally by the user (the skill does not check account ownership). Confirm generated URLs point to the expected domain (https://img.vietqr.io) before sharing. No credentials or external downloads are required; the code only formats and validates in...详细分析 ▾
✓ 用途与能力
The name/description match the included Python script which constructs VietQR image URLs. No unrelated environment variables, binaries, or external services are requested beyond forming a URL to img.vietqr.io.
✓ 指令范围
SKILL.md restricts runtime actions to normalizing user input and invoking the bundled script with specific flags. The instructions do not ask the agent to read arbitrary files, access secrets, or transmit data to unexpected endpoints.
✓ 安装机制
There is no install spec. The skill is instruction-only plus a local Python script; nothing is downloaded or extracted from external URLs and no new packages are installed by the skill itself.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. The script only formats a URL (no network calls are made by the script itself) and does not access secrets.
✓ 持久化与权限
always:false and default invocation semantics are used. The skill does not request persistent system presence or modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/11
Initial publish: generate VietQR payment image URLs for Vietnamese bank transfers with amount, note, and account-name support.
● 无害
安装命令 点击复制
官方npx clawhub@latest install vietqr
镜像加速npx clawhub@latest install vietqr --registry https://cn.clawhub-mirror.com
技能文档
Use the bundled script when the user wants a VietQR payment link or markdown QR preview:
python3 "{baseDir}/scripts/vietqr.py" --bank --account
Optional flags:
--amount(examples:10000,10k,25K,2.5k)--amountalso supports Vietnamese shorthand and separators (examples:200.000,1,5tr,2tr,50k,500kđ)--note "" --account-name "" --template(default:compact2)--markdown(print!VietQR)--list-banks(print built-in bank aliases likevcb,mb,bidv,vietinbank)
Workflow:
- Ask only for the missing bank, account, amount, or note fields needed for the user's request.
- Normalize human input before calling the script.
10k, 2.5k, 1,5tr, 2tr, or 200.000 into whole VND amounts.
- Translate common bank nicknames or abbreviations (including Vietnamese forms with accents) into the bank string the script should receive.
- Prefer using a clear official bank name when there is any ambiguity.
- Run the script instead of hand-building the URL.
- Return the generated URL directly, or the markdown image form when the user wants something they can paste into chat/docs.
- For chat surfaces that do not render markdown images inline, prefer returning the raw URL.
Keep the script layer small and predictable. Do not rely on the script to understand every human shorthand if the agent can normalize it first.
If the script exits with Invalid input: ..., return that reason clearly and ask only for the incorrect field.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制