安全扫描
OpenClaw
安全
high confidenceThe skill's code, runtime instructions, and optional environment variables are consistent with an ecommerce ad-copy generator that charges via a SkillPay billing endpoint; nothing in the bundle requests unrelated credentials, unusual installs, or hidden exfiltration.
评估建议
This skill appears internally consistent: it validates inputs, charges a SkillPay endpoint, and returns 5 ad copies. Before installing, verify you trust the SkillPay endpoint (default: https://skillpay.me) and the skill author (source/homepage are missing). Only supply SKILLPAY_API_KEY if you trust the billing provider and the skill; review the code (scripts/ecommerce_ad_copy_generator.py) yourself if you can. If you need stronger assurance, run the included unit tests locally and/or point SKILL...详细分析 ▾
✓ 用途与能力
Name/description (batch ecommerce ad copy generation with SkillPay billing) align with the included code and SKILL.md: the Python script validates input, calls a billing endpoint, and produces five platform-specific ad copies. All declared behavior is explained by the stated purpose.
✓ 指令范围
SKILL.md instructs the agent to validate inputs, call POST /billing/charge, handle insufficient balance, and return structured JSON. The code implements exactly these steps and does not read unrelated files or environment variables beyond the optional SkillPay settings.
✓ 安装机制
No install spec (instruction-only) and the provided code is pure Python using stdlib urllib; nothing downloads or extracts remote installers. This is low-risk from an install perspective.
ℹ 凭证需求
No required env vars are declared in the registry; SKILL.md and the code list optional SkillPay-related environment variables (endpoint, API key, payment URL template). These are proportional to a billing integration. Note: SKILLPAY_API_KEY is optional — providing it grants the skill bearer ability to authenticate billing requests, so only supply it to trusted skills/endpoints.
✓ 持久化与权限
Skill does not request persistent/always-on privileges, does not modify other skills or system configs, and is user-invocable only. Autonomous invocation is allowed by platform default but is not combined with other privilege escalation indicators.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/6
- Initial release of ecommerce-ad-copy-generator. - Generates 5 platform-specific ecommerce ad copies per request. - Charges 0.10 USDT via SkillPay billing before generating content. - Returns payment URL if user balance is insufficient. - Enforces strict input validation and structured JSON output. - Includes test and usage scripts for easy integration.
● 无害
安装命令 点击复制
官方npx clawhub@latest install ecommerce-ad-copy-generator
镜像加速npx clawhub@latest install ecommerce-ad-copy-generator --registry https://cn.clawhub-mirror.com
技能文档
Overview
Generate 5 conversion-focused ad copies for Facebook / Google / TikTok from structured product input. Charge 0.10 USDT per run before content generation.
Workflow
- Parse and validate input fields:
user_id
- product_name
- selling_points (list or delimited string)
- target_audience
- Call SkillPay
POST /billing/chargewith amount0.10 USDT. - If billing succeeds, generate exactly 5 platform-adapted ad copies.
- If billing returns insufficient balance, return
INSUFFICIENT_BALANCEwithpayment_url. - Return structured JSON output for downstream use.
Run
- Core script:
scripts/ecommerce_ad_copy_generator.py - Test script:
scripts/test_ecommerce_ad_copy_generator.py
Run with direct arguments:
python3 scripts/ecommerce_ad_copy_generator.py \
--user-id user_001 \
--product-name "CloudBoost 智能投放器" \
--selling-points 智能出价 多平台同步 分钟级报表 \
--target-audience "跨境电商运营团队"
Run with JSON file:
python3 scripts/ecommerce_ad_copy_generator.py --input-file ./payload.json
Run tests:
python3 -m unittest scripts/test_ecommerce_ad_copy_generator.py -v
Output Contract
Success:
success: truepricing.amount: "0.10"pricing.currency: "USDT"copies: exactly 5 items, each containing:
platform
- headline
- body
- ctaBilling failure:
VALIDATION_ERRORfor invalid inputINSUFFICIENT_BALANCEandpayment_urlwhen top-up is requiredBILLING_ERRORfor non-balance billing failures
Environment Variables
SKILLPAY_CHARGE_ENDPOINT(default:https://skillpay.me/billing/charge)SKILLPAY_API_KEY(optional bearer token)SKILLPAY_PAYMENT_URL_TEMPLATE(optional; supports{user_id})SKILLPAY_TOPUP_BASE_URL(default:https://skillpay.me/pay)
References
- SkillPay request/response assumptions and fallback behavior:
references/skillpay-api-contract.md
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制