qinglite

模拟登录轻识 (qinglite.cn) 并获取 token，或使用 token 发布作品。

This skill will send the mobile number and verification code you provide to qinglite.cn and will POST content (including any media parameter you pass) to qinglite.cn. It does not request system credentials or read local files, but note: the code prints tokens to stdout (which could be captured in logs) and, despite SKILL.md wording, the implementation does not actually upload local files — it sends the media field as a string. Only install/use if you trust qinglite.cn and are comfortable giving it the phone/code or token. Avoid pasting tokens into other contexts and review whether you need real file uploads (the skill won't read local files to perform uploads). If you want higher assurance, request the maintainer to fix the prefix inconsistency and clarify media-handling behavior.

Type: OpenClaw Skill Name: qinglite Version: 1.0.2 The skill bundle is designed to interact with the `qinglite.cn` platform for user login and content publishing, as described in `SKILL.md`. The Python scripts (`login.py` and `qinglite_platform.py`) make HTTP POST requests to the specified `qinglite.cn` API endpoints. There is no evidence of data exfiltration to unauthorized third parties, arbitrary code execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent. The `media` parameter, while described as a 'file path', is passed as a string within the JSON payload, not used to access local files, aligning with the stated purpose.