📦 discord-bot — 发Discord消息
v1.0.0向 Discord 频道或用户发送自定义消息，支持富文本、Embed 卡片与变量插值，可集成到任意工作流实现通知、告警、日报自动推送。
0· 80·0 当前·0 累计
by 下载技能包
最后更新
2026/3/25
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Do not provide secrets or install this skill as-is. Ask the publisher for the source repository or packaged code, and require that the skill declare its required env vars in metadata. Verify the python script referenced (scripts/discord_bot.py) exists and inspect it before running. If you must test, run in an isolated environment and use a Discord token with minimal permissions (a throwaway/test bot account), not your primary account token or highly-privileged credentials.详细分析 ▾
⚠ 用途与能力
Name/description (send messages to Discord) is plausible, but the skill provides no code or install and the manifest does not declare the DISCORD_API_KEY it tells you to set. A Discord integration would legitimately need a token, but the package should declare that and include code or a trusted install source; this skill does neither.
⚠ 指令范围
SKILL.md instructs the agent/user to run `python3 scripts/discord_bot.py --input ...` and to set DISCORD_API_KEY. No scripts/ files are shipped and the declared requirements list no env vars. The runtime instructions therefore refer to files/credentials that are not present or declared, which is incoherent and could cause someone to supply secrets to an unknown implementation.
✓ 安装机制
Instruction-only skill with no install steps and no code files; this is lower risk than an installer that downloads arbitrary code. However, the absence of shipped code combined with runtime instructions that expect a script is inconsistent.
⚠ 凭证需求
The SKILL.md explicitly requires DISCORD_API_KEY, but the skill metadata lists no required env vars or primary credential. Requesting a Discord token is reasonable for the stated purpose, but not declaring it in metadata and providing no code to audit is disproportionate and suspicious.
✓ 持久化与权限
The skill does not request always:true and uses default invocation settings. It does not ask to modify other skills or system-wide settings in the manifest.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/25
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install jpeng-discord-bot
镜像加速npx clawhub@latest install jpeng-discord-bot --registry https://cn.longxiaskill.com