← Back to Skills Marketplace
pancake-skills
by
suminhthanh
· GitHub ↗
· v1.0.0
1747
Downloads
3
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pancake-skills
Description
Tương tác với Pancake Platform API để quản lý pages, conversations, messages, customers, statistics, tags, posts, users. Sử dụng khi cần (1) Quản lý pages và tạo access token, (2) Xử lý conversations và messages, (3) Quản lý thông tin customers, (4) Xem statistics và analytics, (5) Quản lý tags và posts, (6) Quản lý users/staff, (7) Upload media content, (8) Chat plugin operations.
Usage Guidance
This skill appears to be an honest Pancake API client, but the published metadata omitted required environment variables. Before installing: (1) Confirm you trust the skill author/source (source/homepage unknown). (2) Expect to set USER_ACCESS_TOKEN and PAGE_ACCESS_TOKEN in your environment — do not embed tokens in the repo. (3) Note tokens are passed in query strings (page_access_token/access_token) which can be logged by intermediaries; prefer short-lived or limited-scope tokens and rotate them after use. (4) Keep CONFIRM_WRITE unset until you explicitly want to allow write actions. (5) Review the scripts locally to ensure no unexpected network calls and test in an isolated environment. If the registry metadata were corrected to declare the required env vars and the author/source can be verified, my concerns would be reduced.
Capability Analysis
Type: OpenClaw Skill
Name: pancake-skills
Version: 1.0.0
The skill provides comprehensive functionality to interact with the Pancake Platform API, including read and write operations for pages, conversations, messages, customers, and media uploads. While these capabilities are powerful, the skill includes explicit safety features such as the `CONFIRM_WRITE=YES` guardrail for all write operations and clear instructions in `SKILL.md` and `README.md` that guide the AI agent towards safe usage and warn against common pitfalls (e.g., not saving tokens). The code is straightforward shell scripting without any malicious constructs, obfuscation, or attempts at prompt injection to subvert the agent's behavior for harmful purposes. All API calls are directed to the legitimate `https://pages.fm` domain.
Capability Assessment
Purpose & Capability
The code and SKILL.md implement a Pancake Platform API client (pages, conversations, messages, customers, stats, uploads, etc.) which matches the skill name/description. HOWEVER the registry metadata claims no required environment variables/primary credential while the scripts and SKILL.md clearly require USER_ACCESS_TOKEN and PAGE_ACCESS_TOKEN (and optionally PANCAKE_BASE_URL and CONFIRM_WRITE). This discrepancy is unexpected and should be resolved.
Instruction Scope
Runtime instructions and scripts limit activity to Pancake API endpoints (pages.fm) and to operations described in the README/SKILL.md. They do not attempt to read arbitrary local files or contact unrelated external endpoints. Guardrails (CONFIRM_WRITE, require GET before write described) are present in the docs and enforced by scripts.
Install Mechanism
There is no remote installer; the skill is instruction/code-only (shell scripts and an OpenAPI YAML) and does not download or execute code from external URLs during install. This is a low-risk install model.
Credentials
The scripts require USER_ACCESS_TOKEN and PAGE_ACCESS_TOKEN (and optionally PANCAKE_BASE_URL and CONFIRM_WRITE). The registry metadata incorrectly lists no required env vars/primary credential; that mismatch is a red flag because a user relying on metadata would not be warned to provide sensitive tokens. Also the scripts send tokens as query parameters (page_access_token/access_token) per the API spec — this is functional but increases the chance tokens are logged in transit or by intermediaries compared with using an Authorization header. Tokens are not stored in the repo, and CONFIRM_WRITE defaults to blocking writes, which is good.
Persistence & Privilege
The skill does not request persistent 'always' presence and does not modify other skills or system-wide configuration. It does not persist credentials to disk. Model invocation/autonomy defaults are unchanged (normal).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pancake-skills - After installation, invoke the skill by name or use
/pancake-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release with full Pancake Platform API interaction:
- Manage pages, conversations, messages, customers, tags, posts, users, statistics, and media uploads.
- Provides ready-to-use bash script (`scripts/pancake.sh`) for common API operations (GET/WRITE).
- Includes user and page access token setup, with clear security guardrails for write actions.
- Supports various endpoints for sales channel management, analytics, and chat plugin messaging.
- Detailed usage instructions and examples included in the documentation.
Metadata
Frequently Asked Questions
What is pancake-skills?
Tương tác với Pancake Platform API để quản lý pages, conversations, messages, customers, statistics, tags, posts, users. Sử dụng khi cần (1) Quản lý pages và tạo access token, (2) Xử lý conversations và messages, (3) Quản lý thông tin customers, (4) Xem statistics và analytics, (5) Quản lý tags và posts, (6) Quản lý users/staff, (7) Upload media content, (8) Chat plugin operations. It is an AI Agent Skill for Claude Code / OpenClaw, with 1747 downloads so far.
How do I install pancake-skills?
Run "/install pancake-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pancake-skills free?
Yes, pancake-skills is completely free (open-source). You can download, install and use it at no cost.
Which platforms does pancake-skills support?
pancake-skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pancake-skills?
It is built and maintained by suminhthanh (@suminhthanh); the current version is v1.0.0.
More Skills