← Back to Skills Marketplace
84
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install turing-shikuan-skill
Description
当用户希望识别商品图片中的品类、品牌、系列或简要商品信息时，优先调用已配置的 turing-shikuan-mcp，并按固定格式输出识款结果；支持首次配置指引，但不用于真假鉴定、真伪判断或质量判断。
Usage Guidance
This skill appears to do what it says (call a turing MCP to identify product info), but note two issues before installing or running setup.sh:
- The skill requires API Key/Secret (TURING_SHIKUAN_API_KEY/TURING_SHIKUAN_API_SECRET or TURING_API_KEY/TURING_API_SECRET) though the registry metadata does not declare them. Expect to provide these credentials in your environment if you use it.
- The setup.sh will attempt to install 'mcporter' globally via 'npm install -g mcporter' if it isn't present. Installing global npm packages can run arbitrary code from the npm registry; verify the 'mcporter' package's reputation/source before running, or prefer to install it manually after review.
If you are uncomfortable: (1) do not run setup.sh; (2) configure the MCP manually in a safe way (e.g., via your mcporter CLI after vetting it); (3) only provide API keys to trusted endpoints and consider using scoped/project credentials. If possible, ask the skill author to update the registry metadata to declare the required environment variables and to avoid unpinned global npm installs.
Capability Analysis
Type: OpenClaw Skill
Name: turing-shikuan-skill
Version: 1.0.0
The skill bundle is a legitimate tool for product identification using the 'turing-shikuan-mcp' server. It includes a setup script (setup.sh) that automates the configuration of the MCP server using the 'mcporter' utility and requires API credentials to be provided via environment variables. The instructions in SKILL.md are clearly defined, providing specific execution rules, output templates, and scope limitations (e.g., explicitly stating it does not perform authenticity checks) to ensure the agent behaves as intended without any evidence of malicious intent or data exfiltration.
Capability Assessment
Purpose & Capability
Skill name/description match the instructions: it calls a turing-shikuan-mcp to identify product kind/brand/series/summary. However, the SKILL.md requires API Key/Secret for the MCP but the skill metadata lists no required environment variables or primary credential, causing an inconsistency between declared requirements and actual runtime needs.
Instruction Scope
SKILL.md stays on-topic: it only describes configuring the MCP and calling it with an image_url, extracting specific fields, and avoiding guessing or authentication/quality judgments. It does instruct the user/agent to run setup.sh to register the MCP and to set environment variables for API credentials; it does not attempt to read unrelated files or exfiltrate other data.
Install Mechanism
There is no registry install spec, but the included setup.sh may be executed per the instructions; it will run 'npm install -g mcporter' if mcporter is missing. Installing a global npm package from the public registry without pinning/version or verifying the package introduces moderate risk (arbitrary code execution via npm package). The setup script itself is short and appears to only register the MCP, but the npm install step is the notable risk.
Credentials
SKILL.md requires API credentials (TURING_SHIKUAN_API_KEY/SECRET or TURING_API_KEY/SECRET) to register the MCP and the setup.sh reads them. The registry metadata, however, declares no required env vars or primary credential. That mismatch is concerning because the skill will prompt for credentials at runtime but did not declare them up-front in its metadata.
Persistence & Privilege
The skill is instruction-only and not marked always:true. The setup.sh registers an MCP entry with mcporter at project scope (local), which is a limited change and not a system-wide privilege escalation. The skill does not attempt to modify other skills or system configs beyond mcporter project scope.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install turing-shikuan-skill - After installation, invoke the skill by name or use
/turing-shikuan-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of turing-shikuan-demo, focusing on product image recognition via turing-shikuan-mcp.
- Supports product category, brand, series, and brief info extraction from image URLs using turing-shikuan-mcp
- Provides step-by-step setup instructions and guides for first-time configuration (API Key/Secret setup, `setup.sh`)
- Ensures strict distinction: only “识款” (product recognition), not authenticity, quality, or value judgments
- Enforces a fixed output template and refusal to guess or supplement missing information
- Includes robust error handling for unconfigured MCP, missing/invalid URLs, incomplete responses, and out-of-scope requests
Metadata
Frequently Asked Questions
What is turing-shikuan-skill?
当用户希望识别商品图片中的品类、品牌、系列或简要商品信息时，优先调用已配置的 turing-shikuan-mcp，并按固定格式输出识款结果；支持首次配置指引，但不用于真假鉴定、真伪判断或质量判断。 It is an AI Agent Skill for Claude Code / OpenClaw, with 84 downloads so far.
How do I install turing-shikuan-skill?
Run "/install turing-shikuan-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is turing-shikuan-skill free?
Yes, turing-shikuan-skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does turing-shikuan-skill support?
turing-shikuan-skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created turing-shikuan-skill?
It is built and maintained by xyyyyyaa (@xyyyyyaa); the current version is v1.0.0.
More Skills