🔄 Fully automatic Qwen registration — Qwen自动注册续杯
v1.0.2一键注册 Qwen 账号并获取 token，内置额度预测与自动切换，防止 API 超限，支持定时检测与无限续杯，需安装 auto-register 包。
0· 354·1 当前·1 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
What to consider before installing/using this skill:
- It requires you to pip install an unvetted package from a GitHub repository (auto-register). That package will run code on your machine — review its source before installing.
- The skill will overwrite ~/.openclaw/agents/main/agent/auth-profiles.json (agent credentials) and usage-stats.json and does not keep backups. Backup those files first if you might lose important tokens.
- The skill performs automated account creation and email verifi...详细分析 ▾
⚠ 用途与能力
Name/description (automatic Qwen registration) matches the code and SKILL.md: it expects to run a headless browser to create accounts and obtain tokens. However, the skill reads/writes the agent's auth-profiles.json and usage-stats.json under ~/.openclaw/agents/... — this is privileged access to the agent's stored credentials/config but the skill metadata did not declare any required config paths. Overwriting agent credentials is a higher-privilege action than a simple helper and should have been declared.
⚠ 指令范围
SKILL.md instructs installing an external pip package and Playwright, configuring proxies, and describes generating temporary email, verifying, extracting tokens, writing auth-profiles.json, resetting usage stats, and restarting the Gateway. The provided main.py indeed writes/overwrites auth-profiles.json and usage-stats.json. The runtime instructions therefore include modifying agent configuration and performing automated network-driven account creation — actions that go beyond simple local helpers and can have side effects (destructive overwrite, mass account creation).
⚠ 安装机制
There is no formal install spec in the skill bundle; SKILL.md and requirements.txt instruct the user to pip install a package directly from a GitHub repo (git+https://github.com/2263648274/qwen-auto-register.git) and to run 'playwright install chromium'. Installing arbitrary code from an unknown GitHub repo is moderate-to-high risk because that package (auto-register) will execute arbitrary code on install/run and is not vetted here.
⚠ 凭证需求
The skill declares no required environment variables or config paths, but the documentation encourages setting HTTP_PROXY/HTTPS_PROXY and the code reads/writes files under the agent home directory (~/.openclaw/agents/...). The skill therefore uses environment/config resources that are not declared in its metadata. It also will overwrite stored auth tokens without backing them up, which is disproportionate for a helper unless the user explicitly consents and understands the risk.
⚠ 持久化与权限
always is false (good), but the skill modifies agent-level files (auth-profiles.json) used to store credentials. This is a form of system-wide/agent-level configuration modification rather than just operating within its own sandbox. The skill overwrites tokens (no backup) and claims to restart the Gateway (SKILL.md mentions this) — modifying agent settings in this way warrants caution.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/11
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install qwen-auto-register
镜像加速npx clawhub@latest install qwen-auto-register --registry https://cn.longxiaskill.com