📦 Kuaidaili Proxy — 快代代理IP
v1.0.0集成快代理(Kuaidaili)代理IP服务，一键获取代理IP、查询余额、管理订单、测试连通性，支持高匿与长效IP池，自动轮换，适合爬虫、匿名访问与跨境数据采集。
0· 134·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This package appears to do what it says (fetch proxies, check balance, test proxies) and the Python scripts are readable and call legitimate Kuaidaili endpoints and httpbin.org. However the registry metadata failing to list the required environment variables is an inconsistency you should resolve before installing. Actions to consider:
- Confirm with the publisher (or inspect the files) that KUAIDAILI_SECRET_ID and KUAIDAILI_SIGNATURE are required (they are), and decide how you'll provide them ...详细分析 ▾
ℹ 用途与能力
The name/description (Kuaidaili proxy integration) matches the included scripts (get_proxies.py, check_balance.py, test_proxy.py) and the API reference. However the registry metadata reports no required environment variables or primary credential, while the SKILL.md and scripts clearly require KUAIDAILI_SECRET_ID and KUAIDAILI_SIGNATURE. This metadata omission is an inconsistency (likely oversight) but not by itself malicious.
✓ 指令范围
SKILL.md and the scripts only instruct the agent/user to provide Kuaidaili credentials or pass them as CLI args, call Kuaidaili API endpoints, and optionally test proxies against httpbin.org. The instructions do not ask the agent to read unrelated files, system secrets, or send data to unknown endpoints. There is a minor typo in SKILL.md (example uses scripts/scripts/get_proxies.py) but no scope creep.
✓ 安装机制
There is no install spec (instruction-only) and no downloads or extract steps. The bundled code is plain Python using requests and makes HTTPS calls to Kuaidaili endpoints and httpbin.org. No third‑party, opaque downloads or URL-shortened installers are present.
⚠ 凭证需求
The scripts legitimately require two secrets (KUAIDAILI_SECRET_ID and KUAIDAILI_SIGNATURE). That is proportionate to the stated purpose. However the package/registry metadata lists no required env vars or primary credential — a direct mismatch. Users could be surprised because the registry does not advertise the need to provide credentials. Also the SKILL.md suggests storing creds in environment variables (normal) but users should avoid committing them to disk.
✓ 持久化与权限
The skill is not marked always:true and does not request elevated persistence. It does not modify other skills, system configs, or write hidden services. Autonomous invocation is allowed (default) which is normal; nothing in the package indicates it would abuse that.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/20
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install kuaidaili-skill
镜像加速npx clawhub@latest install kuaidaili-skill --registry https://cn.longxiaskill.com