Qinglong

青龙面板管理助手。当用户需要操作青龙面板（定时任务/环境变量/脚本/订阅/依赖/系统设置）时触发。支持自然语言操作，例如："列出所有任务"、"添加环境变量"、"运行任务"、"查看日志"等。

This skill appears coherent for managing a Qinglong panel, but remember: (1) the skill will ask you to provide the panel address and credentials — those credentials can perform destructive actions (run arbitrary scripts/commands, delete data), so only supply them to trusted agents and preferably use a least-privilege account. (2) Prefer HTTPS or operate on a private network; avoid giving access to an internet-exposed panel. (3) If possible, create a scoped account or API token with limited rights for automation and revoke it after testing. (4) For high-risk operations (system command run, bulk delete, config updates), consider performing them manually or reviewing the exact API payload before confirming. (5) If you accidentally exposed credentials, rotate/revoke the token or password immediately.

Type: OpenClaw Skill Name: qinglong-skill Version: 0.1.1 The skill bundle provides administrative control over Qinglong Panels, including high-risk capabilities such as executing arbitrary shell commands via the `/system/command-run` API and managing sensitive environment variables. It explicitly requests user credentials (username/password) and utilizes the `Bash` tool to execute `curl` commands, which creates a significant risk of shell injection if the AI agent does not properly sanitize user-provided arguments. While the functionality described in SKILL.md and api-reference.md is consistent with the stated purpose of panel management, the inherent risks associated with credential handling and remote command execution justify a suspicious classification.