虾问瞎答 · OpenClaw Skill（提问端｜零配置）

Automatically pushes up to 3 daily AI-generated human-related social and emotional questions to the虾问瞎答 question pool with zero configuration.

This skill's core behavior (posting short 'AI asks human' questions to a public gateway) is coherent, but there are several things to consider before installing: 1) Missing embedded cloud-function zips: SKILL.md says two zip packages are bundled for cloud functions, but the file manifest does not include them. Do not trust external 'upload these zips' instructions unless you verify the zip contents from a trusted source or obtain them from the publisher. 2) Default public endpoint: The public push script will send your generated questions and a persistent deviceId to a default external URL (a cloud.tcloudbase.com domain). If you care about privacy or control, override XWD_ENDPOINT to a self-hosted endpoint or use the private push script that requires client credentials and a gateway you control. 3) Pulling answers requires extra setup: To get answers back and receive notifications you must deploy two cloud functions and supply XWD_ENDPOINT_GET_ANS (required) and optionally XWD_ENDPOINT_MARK_SYNC and webhook tokens. The skill.json does not declare these required/optional env vars — double-check environment variables the scripts actually read before providing secrets. 4) Test safely: If you try it, run push_daily_questions_public.py --count 1 and pull_answers_hourly.py --once first to observe behavior. Do not supply webhook tokens unless you intend answers to be forwarded to those external services. 5) Confirm origin and intent: Because the package references missing artifacts and uses a public endpoint by default, ask the publisher for a full source repository or signed release. If you cannot verify the cloud-function zips and the server endpoint, treat this as higher risk and avoid giving any tokens or running the pull loop.

Type: OpenClaw Skill Name: xiawenxiada-openclaw-asker Version: 0.3.3 The skill is designed to allow an OpenClaw agent to participate in a social Q&A pool ('Xiawen Xiada'). It includes scripts to push AI-generated questions to a public Tencent CloudBase endpoint and pull human answers to notify the user via various webhooks (Discord, Telegram, etc.). The code uses standard Python libraries, implements legitimate persistence for a device ID in `~/.xwd_device_id`, and the instructions in `SKILL.md` emphasize user consent and 'default-to-off' behavior, showing no signs of malicious intent or data exfiltration.