🧪 HPD Pipeline — HPD流水线
v0.1.0为HPD实验室提供可重复的“规划→设计→条件开发→测试”流程,支持Lobster优先及顺序执行,确保获批创意高效落地。
0· 97·0 当前·0 累计
下载技能包
最后更新
2026/3/29
安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions mostly match a project pipeline, but they expect external CLIs/APIs (Lobster, openclaw image generation, Gemini API, Notion) and file writes without declaring credentials or install requirements — this mismatch is worth caution.
评估建议
This skill appears to be a coherent project pipeline, but it relies on external CLIs and APIs (lobster, openclaw image generation, Gemini API) and asks outputs to be 'Notion-first' while declaring no credentials. Before installing: (1) confirm whether your agent environment already has Lobster, OpenClaw, Gemini, or Notion integrations and what credentials they expose; (2) decide whether you are comfortable the agent may call those services and push project artifacts to Notion; (3) if you want to...详细分析 ▾
ℹ 用途与能力
The name/description (HPD pipeline) align with the SKILL.md stage contract and required outputs. Expectation to prefer a 'lobster' CLI and to generate images/CAD/source fits the described pipeline. However, the skill references external tools and outputs (openclaw image generate, Gemini API, Notion-first) that are not declared in the skill's requirements.
⚠ 指令范围
The instructions tell the agent to run external commands and APIs (try lobster on PATH; run 'openclaw image generate'; fall back to a 'Gemini API script' if image generation fails) and to write OpenSCAD and other artifact files to the workspace. They also require publishing outputs Notion-first. Those actions involve external integrations and writing files, but the skill does not enumerate what credentials or endpoints will be used or provide the fallback scripts — giving the agent broad discretion to call environment-integrated services.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files. That minimizes code-install risk.
⚠ 凭证需求
No environment variables, credentials, or config paths are declared, yet the SKILL.md expects use of external services (Gemini API, Notion) and CLIs (lobster, openclaw). Those services typically require API keys/credentials; the absence of declared env vars is a mismatch. If the agent environment already has those integrations, the skill would use them implicitly — which could lead to unintended data sharing.
✓ 持久化与权限
always is false and there is no code that requests persistent/system-wide configuration or modifies other skills. The skill writes artifacts to its workspace per the contract, which is normal for this type of workflow.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/29
Initial publish
● 无害
安装命令
点击复制官方npx clawhub@latest install hpd-pipeline
镜像加速npx clawhub@latest install hpd-pipeline --registry https://cn.longxiaskill.com