DeepSeek 官方 API 对话（免费/超便宜，支持中文）

This skill is a simple DeepSeek API client, but it has notable problems you should address before using it: 1) Do not use the embedded API key in config.env — it may be real and is exposed in the package. Replace it with your own key and, if you already used the included key, rotate/revoke it immediately. 2) The package metadata claims curl is required but the script uses node; ensure you run it with node and that the environment matches the runtime expectations. 3) The registry metadata failing to declare DEEPSEEK_API_KEY is an inconsistency — expect to set DEEPSEEK_API_KEY in your environment rather than trusting config.env. 4) Confirm the DeepSeek API hostname (api.deepseek.com) and the project's homepage independently before sending sensitive data. If you intend to install or run this skill, remove the bundled config.env, supply your own API key from a trusted source, and verify the key has only the minimal permissions you need.

Type: OpenClaw Skill Name: deepseek-chat Version: 1.0.0 The skill bundle provides a functional integration with the DeepSeek API, but it contains a hardcoded API key in the `config.env` file, which is a significant security vulnerability (credential leak). While the logic in `scripts/chat.js` is benign and correctly implements the stated functionality using the official `api.deepseek.com` endpoint, the inclusion of active secrets in the bundle is high-risk behavior.