by 下载技能包
最后更新
2026/4/12
安全扫描
OpenClaw
安全
high confidence该技能的代码与运行时指令与其声明的用途一致（通过已登录的 Chrome 会话在 macOS 上查询 一嗨租车）；它需要浏览器自动化和本地 OCR，但不会索取无关凭据或安装任意远程代码。
评估建议
This skill appears to do what it claims, but it operates by executing JavaScript inside your logged-in Google Chrome session via AppleScript and then running local OCR (tesseract). Before installing or using it: (1) confirm you are comfortable that the skill will have access to your Chrome session for OneHai (cookies/session state can act like credentials); (2) only enable the Chrome setting it requires if you trust the skill and understand macOS automation risks; (3) run it from a Chrome profil...详细分析 ▾
✓ 用途与能力
The name/description say it will query OneHai using the user's logged-in Google Chrome on macOS; the scripts (query-onehai-live-chrome.mjs, extract.mjs, onehai-policy.mjs, etc.) implement exactly that flow (open a Chrome tab via osascript, run in-page JS against 1hai.cn endpoints, parse results, OCR price canvases). No unrelated services, binaries, or environment variables are requested.
ℹ 指令范围
The SKILL.md and code explicitly require and use the user's logged-in Chrome session and AppleScript automation to execute JS in Chrome and to post to OneHai endpoints. This is within scope for the stated task, but it does mean the skill runs code inside your browser context (which has access to authenticated site state). The instructions also require tesseract and use temporary files for OCR. There is no code that sends results to third-party servers other than OneHai; outputs are returned via stdout.
✓ 安装机制
There is no install spec or remote download. The skill is instruction-plus-local-scripts only; it runs local Node scripts and calls system binaries (osascript, tesseract). No archives or external installers are fetched by the skill itself.
ℹ 凭证需求
The skill requests no environment variables or credentials, which is appropriate. However, it depends on the user's logged-in Chrome session (implicitly using browser cookies/session state) and requires enabling Chrome's 'execute JavaScript via Apple Events' setting — both grant the skill access to authenticated OneHai pages. Treat the browser session as a sensitive credential when consenting to use.
✓ 持久化与权限
The skill is not always-enabled, does not modify other skills or system-wide agent settings, and does not request elevated or persistent presence. It briefly opens a Chrome tab and writes temporary OCR files, then removes them; it does not persist new system-wide configuration.
⚠ scripts/query-onehai-live-chrome.mjs:52
Shell command execution detected (child_process).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
- 首次发布 china-rental-price 技能。 - 通过 macOS 上已登录的 Chrome 会话实时调用 OneHai，提供中国境内自驾租车的参考价格及预订链接。 - 区分真正无车库存与高峰期政策限制。 - 引导用户选择正确的取车门店（火车站或机场）以获取精准查询。 - 结果以结构化 JSON 输出，字段清晰，便于解读与报表。
● 可疑
安装命令
点击复制官方npx clawhub@latest install china-rental-price
镜像加速npx clawhub@latest install china-rental-price --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
获取eHi租车价格 安装说明： 安装命令：npx clawhub@latest install china-rental-price 该技能用于国内通用相关操作，可能需要相应的平台账号或API密钥
技能文档
--- name: china-rental-price description: 当用户需要中国境内租车参考价，尤其是当日或节假日出行、且涉及火车站/机场门店选择时，以及 OneHai 高峰时段“最低租期”规则被误认为无车的情况使用。本技能利用用户 macOS 上已登录的 Google Chrome 会话查询 OneHai，返回参考价与预订链接，并区分政策限制与真正无车。
# China Rental Price
概述
本技能用于国内自驾租车价格查询，仅限行程规划对话。当前可靠路径为通过用户 macOS 已登录的 Google Chrome 访问 OneHai。使用时机
- 用户询问中国境内租车价、当日价或节假日价。
- 用户指定火车站/机场取车门店，而非全城任意门店。
- 用户看到“0 辆车”页面，需确认是售罄还是受高峰最低租期限制。
前置条件
- 必须使用绝对日期与时间。
- Google Chrome 已登录 一嗨租车。
- Chrome 已开启
查看 > 开发者 > 允许 Apple 事件中的 JavaScript。 - macOS 已安装
osascript与tesseract。
流程
- 优先按交通场景选门店：
train-station
- 航班到达 → airport
- 用户未指定交通场景时才用全城模式。
- 若用户已知具体门店，传入
--pickup-location与--dropoff-location。 - 运行
scripts/query-onehai-live-chrome.mjs。 - 解读结果：
bookingRestriction 表示政策限制（如节假日最低租期），勿说成普通售罄。
- priceMin 与 vehicleSamples 为查询瞬间的参考价，非最终结算价。
- availableCars = 0 且无 bookingRestriction 更接近该门店该时段真正无车。 命令示例
城市+交通场景： ``bash
node /Users/shenmingjie/.codex/skills/china-rental-price/scripts/query-onehai-live-chrome.mjs \
--pickup-city 宣城 \
--pickup-scene train-station \
--pickup-datetime 2026-05-01T15:30 \
--dropoff-datetime 2026-05-04T10:30
` 精确门店：
`bash
node /Users/shenmingjie/.codex/skills/china-rental-price/scripts/query-onehai-live-chrome.mjs \
--pickup-city 宣城 \
--pickup-location "泾县高铁站自助点" \
--dropoff-city 宣城 \
--dropoff-location "泾县高铁站自助点" \
--pickup-datetime 2026-05-01T10:00 \
--dropoff-datetime 2026-05-04T10:00
`
输出格式
脚本输出 JSON，含字段：
platformstatuscapturedAtbookingUrlselectedStorepriceMinpriceTotalIfAvailableavailableCarsvehicleSamplesbookingRestrictionwarnings`
回复指引
- 明确告知所选门店（火车站店/机场店/其他）。
- 价格表述统一用“参考实时价”。
- 若查询属于完整行程，结合用户真实抵达方式，而非全城扫店。
- 透明说明当前可靠自动化路径仅限 OneHai。