📦 HappyCoding AI Coding — AI全周期编程
v1.0.0在 HappyCoding 平台内完成需求讨论、代码编辑、预览、保存、发布及证据文档撰写的全流程 AI 编程助手。
0· 513·4 当前·4 累计
by @dongkuang下载技能包
最后更新
2026/3/5
安全扫描
OpenClaw
可疑
medium confidenceThe skill is an instruction-only workflow for a specific web platform and mostly coherent, but it implicitly relies on a logged-in account and references an API key endpoint without declaring required credentials — a mismatch that warrants caution.
评估建议
This skill is an instruction-only guide for using a specific web coding platform and appears to do what it says, but note two things before using it: (1) it expects to use your existing logged-in account and to save/publish content — verify you are comfortable having the agent operate under that account and that published content won't leak secrets; (2) the SKILL.md references an image API requiring an x-api-key but the skill metadata does not declare any required credentials — confirm where tha...详细分析 ▾
✓ 用途与能力
The name and description claim a full-cycle workflow for the '小畅AI Coding' platform and the SKILL.md only contains step-by-step instructions for using that platform (editing, previewing, saving, publishing). All required actions are consistent with that purpose.
ℹ 指令范围
Instructions include running JavaScript in the page (window.editorManager...), reading editor contents, saving/publishing projects, taking screenshots, and calling a multimodal image API. These are within the platform scope, but the skill expects to use the user's existing logged-in account and to '回传'publish links/screenshots — which are privacy-relevant behaviors the user should be aware of.
✓ 安装机制
No install spec and no code files are present (instruction-only), so nothing is written to disk or installed. This is the lowest-risk install profile.
⚠ 凭证需求
The SKILL.md references an API endpoint that requires an x-api-key (placeholder {{your key}}) but the skill metadata declares no required environment variables or credentials. It also assumes a logged-in account '小畅openclaw' is available. The missing explicit declaration of credentials/session requirements is a proportionality mismatch and a transparency gap.
✓ 持久化与权限
always is false and the skill does not request persistent system-level privileges or modify other skills. It instructs interacting with the web app and localStorage keys (localStorage.imageHistory), which is expected for a UI workflow; no unusual persistence or privilege escalation is requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/5
AI Can Coding For APP
● 无害
安装命令
点击复制官方npx clawhub@latest install happycoding-aicoding
镜像加速npx clawhub@latest install happycoding-aicoding --registry https://cn.longxiaskill.com