← Back to Skills Marketplace
kmong
by
mupengi-bot
· GitHub ↗
· v1.0.0
420
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install kmong
Description
Automates Kmong sign-up, identity verification, profile setup, and service registration using OpenClaw browser with SMS and captcha handling.
README (SKILL.md)
Kmong Automation Skill 🐧
Registration Process (OpenClaw Browser)
1. Sign Up
1. browser open → https://kmong.com
2. Click sign up (ref: sign up link)
3. Select Google login (Google logo button)
4. Select Google account → Click "Continue"
5. Select "Act as Expert"
6. Check agree all → "Sign up complete"
2. Identity Verification (PASS SMS)
1. Click "Mobile phone verification" → Popup tab opens
2. Check popup tab targetId (query tabs)
3. Select carrier radio: click via evaluate
- document.querySelectorAll('input[type=radio]')[0].click() // SKT
- [1] = KT, [2] = LGU+
4. Agree all: document.querySelectorAll('input[type=checkbox]')[0].click()
5. Click "Verify with SMS"
6. Enter name, birthdate(6 digits), 7th digit of SSN, phone number, security characters
7. Read security characters via screenshot
8. "Confirm" → Enter SMS verification code → "Confirm"
9. In main tab, agree to seller terms → "Expert registration complete"
3. Cautions
- When checkbox ref doesn't work: Use
evaluatewithdocument.querySelectorAll('input[type=checkbox]')[0].click() - Cannot use
const/let— Usevaror no declaration - Cannot chain multiple statements with semicolon — One statement per evaluate
- PASS verification popup is separate tab — Need to check targetId via tabs query
- Security characters (captcha): Take screenshot and read as image
4. Profile Setup
1. Change nickname: "Edit" button → Select all text (Meta+a) → Enter new nickname → "Save"
2. Expertise: Click "Select service fields"
3. Introduction: Click "Write introduction"
4. Register service: Click "Register service"
5. Service Registration Tips
- Title: Include SEO keywords (e.g., "AI Chatbot Development | Student Council Organization Management Automation")
- Price: 3 tiers (Standard/Deluxe/Premium)
- Description: 500+ chars, specify concrete deliverables
- Category: IT·Programming > Chatbot Development / Task Automation
Account Information
- Email: Configure in
~/.secrets/kmong.env - Nickname: Configure in workspace settings
- Profile: https://kmong.com/@[your-username]
🐧 Built by 무펭이 — Mupengism ecosystem skill
Usage Guidance
This skill contains detailed, low-level instructions to automate account sign-up and SMS/captcha-based identity verification, and it references a local secrets file (~/.secrets/kmong.env) that is not declared in the skill metadata. Before installing: (1) Ask the author to explicitly declare required environment variables/config paths and explain how SMS and captcha reading are performed (local OCR vs external service) and where verification codes/captchas are stored or transmitted. (2) Do not provide real SSN digits or your primary phone number until you verify the implementation and trust the source — use test/ephemeral accounts and numbers. (3) Prefer running this skill in an isolated environment (VM or throwaway agent) to limit exposure of PII. (4) If you need this functionality, require the skill to document how it protects captured PII and to limit autonomous invocation; otherwise complete sensitive steps manually.
Capability Analysis
Type: OpenClaw Skill
Name: kmong
Version: 1.0.0
The skill is classified as suspicious due to its instructions for handling highly sensitive Personally Identifiable Information (PII) such as name, birthdate, phone number, and the 7th digit of a Social Security Number during identity verification. Additionally, it instructs the agent to access email credentials from `~/.secrets/kmong.env`, a local file, and extensively uses the powerful `evaluate` command for direct DOM manipulation. While these capabilities are presented as necessary for the stated purpose of automating Kmong registration, they introduce significant attack surface and data handling risks, even without explicit instructions for malicious exfiltration or unauthorized actions within the `SKILL.md` file.
Capability Assessment
Purpose & Capability
The skill claims to automate Kmong sign-up and verification using the OpenClaw browser — that purpose is coherent with a set of browser automation instructions. However, SKILL.md explicitly references a local secrets file (~/.secrets/kmong.env) for account email and workspace settings for nickname, neither of which are declared in the skill metadata (requires.env or required config paths). The presence of that undeclared secret file requirement is disproportionate to the stated metadata.
Instruction Scope
The runtime instructions direct the agent to perform highly sensitive actions: entering name, birthdate, the 7th digit of an SSN, phone number, receiving and entering SMS verification codes, and taking screenshots of captchas and 'reading' them. These steps involve collecting and handling PII and authentication tokens. The SKILL.md also contains low-level constraints about evaluate() usage and tab targetId handling — reasonable for browser automation — but the instructions give the agent latitude to capture images and OCR/interpret them without describing where OCR/SMS handling occurs or how captured data is stored/transmitted.
Install Mechanism
Instruction-only skill with no install spec or code files. This has lower disk/write risk; nothing is installed by the skill itself. The lack of an install step is consistent with a purely-instruction skill.
Credentials
Metadata declares no required environment variables or config paths, but SKILL.md instructs the user/agent to read ~/.secrets/kmong.env and workspace settings for account information. The skill also implicitly needs an SMS-receiving capability and an OCR/captcha-reading capability to function, yet provides no declared env variables, endpoints, or dependency requirements for those services. Requesting or handling SSN digits and SMS verification codes is sensitive and should be explicitly declared and justified.
Persistence & Privilege
always:false (normal) and autonomous invocation is allowed by default. Because the skill handles PII and verification flows, autonomous runs increase risk — an autonomously-invoked agent could attempt many account creations or submit PII without ongoing human oversight. The skill does not request persistent system-wide configuration, nor does it modify other skills per the provided data.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install kmong - After installation, invoke the skill by name or use
/kmong - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial publish
Metadata
Frequently Asked Questions
What is kmong?
Automates Kmong sign-up, identity verification, profile setup, and service registration using OpenClaw browser with SMS and captcha handling. It is an AI Agent Skill for Claude Code / OpenClaw, with 420 downloads so far.
How do I install kmong?
Run "/install kmong" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is kmong free?
Yes, kmong is completely free (open-source). You can download, install and use it at no cost.
Which platforms does kmong support?
kmong is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created kmong?
It is built and maintained by mupengi-bot (@mupengi-bot); the current version is v1.0.0.
More Skills