← Back to Skills Marketplace
76
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install powpow-simple
Description
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人。支持用户注册、数字人创建、位置选择和徽章管理。
Usage Guidance
This skill appears to do what it claims (a POWPOW client). Before installing, consider: 1) Network/privacy: the skill will send credentials, avatar files and other data to the POWPOW service (default https://global.powpow.online) and will call AMap for geocoding — only use if you trust those services. 2) Local files: uploadAvatar reads an arbitrary file path you provide; avoid uploading sensitive files. 3) Logs and feedback: the skill can write logs/feedback to disk (configurable logFile or default locations described in README) — if you don't want files written, do not set a logFile and verify whether the skill creates defaults. 4) Hardcoded AMap key: a default AMap key is embedded; you may want to replace it with your own key if needed. 5) If you need stronger assurance, review the package source at the repository URL (https://github.com/durenzidu/powpow-simple.git) and confirm the truncated portions (feedback/logging defaults) before use.
Capability Analysis
Type: OpenClaw Skill
Name: powpow-simple
Version: 1.0.0
The skill contains a hardcoded Amap (高德地图) API key (8477cbc2bfd4288ac09582f583f33cca) in 'skill.json' and 'dist/index.js', which is a significant security vulnerability. More critically, the 'powpow.uploadAvatar' command in 'dist/index.js' accepts a user-provided 'filePath' and uses 'fs.createReadStream' to upload the file to a remote endpoint (global.powpow.online) without any path validation or sandboxing. This allows for potential arbitrary file exfiltration if the AI agent is manipulated into reading sensitive local files (e.g., credentials or SSH keys). Additionally, the 'powpow.feedback' function collects and stores local logs that may contain sensitive session information.
Capability Assessment
Purpose & Capability
Name/description match the implementation: the skill implements register/login/avatar upload/create/list/renew/searchLocation against a POWPOW API base URL and uses AMap for geocoding. Dependencies (axios, form-data) are appropriate for HTTP requests and multipart uploads. There are no unrelated environment variables or binaries required.
Instruction Scope
SKILL.md commands align with the implemented commands in dist/index.js. The runtime instructions and code only reference the POWPOW API (https://global.powpow.online) and AMap geocode (https://restapi.amap.com) and do not attempt to read unrelated system files or environment variables. The skill does read a user-supplied file path for avatar upload (expected) and stores session context in the provided OpenClaw context (expected).
Install Mechanism
There is no install spec beyond normal npm packaging; the package.json dependencies are standard libraries (axios, form-data) from npm. No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill declares no required environment variables. It does include default configuration values (a hardcoded AMap key and POWPOW base URL) in DEFAULT_CONFIG; the embedded AMap key is potentially a developer/public key (not a secret requested from the user). The skill stores and uses a POWPOW session token (from successful login) in the agent context, which is appropriate for its functionality.
Persistence & Privilege
The skill includes a configurable logger that can write logs to disk (setLogFile) and README describes default local paths for logs and feedback. Writing logs/feedback to the user's home directory is plausible for this kind of skill, but it means the skill will create files locally if configured or if default behavior is implemented. always is false and the skill does not request elevated privileges or modify other skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install powpow-simple - After installation, invoke the skill by name or use
/powpow-simple - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of powpow-simple skill (v1.0.0)
- Easily create and manage POWPOW digital humans within OpenClaw
- Supports user registration, digital human creation, location selection, and badge management
- Includes commands for login/logout, avatar upload, location search (Amap/高德地图), and user feedback
- Badge system introduced: create or renew digital humans with earned badges
Metadata
Frequently Asked Questions
What is POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人?
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人。支持用户注册、数字人创建、位置选择和徽章管理。 It is an AI Agent Skill for Claude Code / OpenClaw, with 76 downloads so far.
How do I install POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人?
Run "/install powpow-simple" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 free?
Yes, POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 support?
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人?
It is built and maintained by 度人自度 (@durenzidu); the current version is v1.0.0.
More Skills