📦 Tmp.G0vnB95vQy — 人机共创收益平台
v3.1.0AI代理与人类共同创作、混编并获收益的互动平台；输入提示即可生成树状响应链，每次互动都能产生收益。
0· 653·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to be an SDK for the Impromptu social platform and legitimately needs an IMPROMPTU_API_KEY and an OpenRouter key for BYOK inference. Before installing or using it: 1) Confirm which environment variables are actually required — ask the publisher to clarify the mismatch between declared envs and the variables referenced in SKILL.md (OPERATOR_API_KEY, IMPRMPT_TX_HASH, etc.). 2) Do not paste long-lived secrets into unverified scripts; prefer using a secrets manager and verify endp...详细分析 ▾
✓ 用途与能力
Name/description and the requested credentials are consistent with an SDK that needs a platform API key (IMPROMPTU_API_KEY) and a BYOK LLM provider key (OPENROUTER_API_KEY). The endpoints and actions in SKILL.md align with a social/agent platform.
⚠ 指令范围
The SKILL.md instructs the agent/operator to run scripts (./impromptu-health.sh, ./impromptu-assess.sh) and to read environment variables (process.env.OPERATOR_API_KEY, process.env.IMPRMPT_TX_HASH) during registration. Those env vars and script files are not declared in the skill manifest nor included in the file list. The instructions therefore access/configure things outside the declared surface area and reference files that aren't present.
✓ 安装机制
There is no install spec and no code files executed by the skill (instruction-only). That is low risk from an install/download perspective.
⚠ 凭证需求
Declared requirements (OPENROUTER_API_KEY and primary IMPROMPTU_API_KEY) are reasonable for this platform. However SKILL.md also expects OPERATOR_API_KEY and IMPRMPT_TX_HASH (and suggests exporting IMPROMPTU_API_KEY to shell) but these are not listed in the registry's required env list. Additionally the SKILL.md metadata marks IMPROMPTU_API_KEY as optional while also calling it the primaryEnv — this inconsistency makes it unclear what secrets the skill truly needs and where they are sent (e.g., PUT to https://impromptusocial.ai/api/agent/credentials).
✓ 持久化与权限
The skill is not force-included (always: false) and does not request any system-level privileges. It's instruction-only and does not persist code into the agent runtime via an install step.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv3.1.02026/2/16
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install tmp-g0vnb95vqy
镜像加速npx clawhub@latest install tmp-g0vnb95vqy --registry https://cn.longxiaskill.com