📦 Bijian AI Writing Expert — AI写作助手
v1.1.0三步完成公众号/文章创作：收集主题、受众、风格三要素→调用笔尖AI生成正文→输出可直接发布的排版内容，支持多平台一键发布。
0· 286·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill will send your article prompts and reference materials to an external service at bj.aizmjx.com and requires you to store an API token in a workspace config file (BIJIAN_API_TOKEN and related vars). Before installing: 1) Be aware that the registry metadata does not list these required env vars—ask the publisher to update metadata. 2) Treat BIJIAN_API_TOKEN as a secret: store it in a secure secrets store or ensure the .bijian_config file is accessible only to you (restrict file permissi...详细分析 ▾
ℹ 用途与能力
The name/description (AI writing via 笔尖) matches the included client script and runtime instructions which call a bj.aizmjx API to generate articles. However, the registry metadata claims no required environment variables while the SKILL.md and scripts clearly require BIJIAN_API_TOKEN and related env vars—an inconsistency between declared metadata and actual needed configuration.
✓ 指令范围
Runtime instructions are scoped to: load a workspace .bijian_config, collect three writing elements from the user, call the local scripts/bijian_api.py to interact with the external API (spaces, generate, poll, fetch). The skill does not instruct reading arbitrary system files, nor does it post data to unexpected endpoints beyond the documented bj.aizmjx and sso.aizmjx URLs. It explicitly says not to ask users for tokens and to source a config file instead.
✓ 安装机制
No install spec or remote downloads; the skill is instruction-only with a single included Python script (no obfuscated code). No external packages are fetched by the skill itself.
⚠ 凭证需求
The skill requires sensitive env vars (BIJIAN_API_TOKEN, optionally BIJIAN_TOKEN_HEADER/PREFIX/BASE_URL/USER_ID) to operate, which is proportionate to its purpose (calling an external API). The concern is that the package metadata advertised no required environment variables, so users may not realize they must provide/store a secret. The SKILL.md instructs creating and sourcing a plaintext config file in the workspace, which has privacy risks if the file is world-readable or stored in shared/workspace locations.
✓ 持久化与权限
always is false and the skill does not request elevated or persistent platform-wide privileges. It does not modify other skills or system settings. Allowing autonomous invocation is the platform default and not in itself flagged.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/10
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install inkroam-bijian-writing
镜像加速npx clawhub@latest install inkroam-bijian-writing --registry https://cn.longxiaskill.com