← Back to Skills Marketplace
119
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install rhskill
Description
RunningHub AI Platform 直接调用 - 文生图、图生图、视频生成等，支持智能存储判断和链式工作流
Usage Guidance
This skill appears to implement what it says: a RunningHub API client plus optional cloud upload. Before installing, check these points: (1) Config mismatch — the metadata lists a config path 'runninghub.baseUrl' but the code and README expect RUNNINGHUB_BASE_URL; make sure you set RUNNINGHUB_BASE_URL. (2) The skill will read ~/.openclaw/openclaw.json to merge user app configs — ensure that file does not contain secrets you don't want read. (3) If you use 'cloud' storage the skill runs system commands (unzip, bdpan, gog). Those external CLIs may access your cloud credentials (bdpan/gog) or execute arbitrary binaries on your machine; verify and trust those CLIs first. (4) The skill writes files to /tmp and the configured outputPath. If you do not trust the repository author or the bdpan/gog tools, run the skill in a sandbox or inspect/modify the storage-handler and task-executor code to remove or alter cloud upload behavior. (5) If you want to proceed, export RUNNINGHUB_API_KEY and RUNNINGHUB_BASE_URL and test only with non-sensitive projects until comfortable.
Capability Analysis
Type: OpenClaw Skill
Name: rhskill
Version: 1.0.0
The skill facilitates AI media generation via RunningHub but contains high-risk code patterns. Specifically, 'scripts/storage-handler.mjs' uses 'execSync' to invoke system commands ('unzip', 'bdpan', 'gog') with parameters derived from API responses and user-provided project names. Although basic sanitization is applied to the project name, the pattern is vulnerable to shell injection if external inputs (like task IDs or file URLs) are crafted maliciously. This is classified as suspicious due to the presence of critical vulnerabilities without explicit evidence of malicious intent.
Capability Assessment
Purpose & Capability
Name/description describe direct RunningHub API usage and the code implements a client, task execution, and storage handling — these are coherent. Minor mismatch: registry metadata / SKILL.md declare a required config path 'runninghub.baseUrl' while the code and README use the environment variable RUNNINGHUB_BASE_URL; this inconsistency could cause configuration confusion but does not by itself indicate malicious intent.
Instruction Scope
SKILL.md instructs the agent to set RUNNINGHUB_API_KEY and RUNNINGHUB_BASE_URL and to edit ~/.openclaw/openclaw.json; the code reads that file and the skill directory (references/shared-apps.json). The code also executes system commands (unzip, bdpan, gog) via child_process when handling storage — these steps are related to the 'cloud' storage feature but broaden what the agent will do (filesystem writes, spawning external CLIs). SKILL.md documents bdpan/gog usage but does not explicitly warn that the skill will call those CLIs automatically during cloud uploads.
Install Mechanism
There is no install spec — it's instruction/code-only and nothing is downloaded from arbitrary URLs. The code files are included with the skill; no external package downloads or extract-from-URL steps are present in the manifest.
Credentials
Declared required env: RUNNINGHUB_API_KEY (primary credential) which matches the RunningHub integration. However, the code also relies on RUNNINGHUB_BASE_URL (used by createClientFromEnv) though RUNNINGHUB_BASE_URL is not listed in metadata's required env list — this is an omission. Additionally, storage-handler spawns bdpan/gog CLIs which may use stored credentials or local auth tokens outside the skill; those credentials are not requested by the skill but the skill can cause those tools to run and thus indirectly access user cloud accounts.
Persistence & Privilege
The skill does not request 'always: true' or modify other skills. It reads ~/.openclaw/openclaw.json for its own config and writes/downloads files to output paths and /tmp as part of storage handling — expected for a media-handling skill, but be aware of filesystem writes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install rhskill - After installation, invoke the skill by name or use
/rhskill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the RunningHub API skill for direct access to AI tasks like image, video, and audio generation.
- Supports advanced storage modes: auto, cloud (Baidu Netdisk/Google Drive), and none, with smart decision logic.
- Offers APIs for listing available RunningHub apps, executing tasks (sync/async), and querying task status.
- Includes detailed setup guides for required environment variables and optional cloud storage integration.
- Provides workflow examples for image and video generation, including step-by-step chainable processes.
- Includes troubleshooting, app extension instructions, and integration notes with OpenClaw and RHMCP.
Metadata
Frequently Asked Questions
What is RHSkill?
RunningHub AI Platform 直接调用 - 文生图、图生图、视频生成等，支持智能存储判断和链式工作流. It is an AI Agent Skill for Claude Code / OpenClaw, with 119 downloads so far.
How do I install RHSkill?
Run "/install rhskill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is RHSkill free?
Yes, RHSkill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does RHSkill support?
RHSkill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created RHSkill?
It is built and maintained by AIRix315 (@airix315); the current version is v1.0.0.
More Skills