youclaw

有米云智能营销分析助手，深度拆解广告创意，挖掘品牌投放策略，支持创意策略讨论、营销策略探讨。触发：关键词 分析品牌, 品牌分析, 策略探索, 投放策略, 创意质询, 压力测试；命令 /youclaw、/youmiyun、/creative-chat、/grill-chat、/grill-youclaw、/grill

This skill otherwise appears coherent with its stated purpose, but take precautions before installing: - Prefer setting YOUCLOUD_API_KEY as an environment variable rather than pasting it into chat. Do not send secrets in conversation unless you trust the publisher. - Ask the vendor where config.json is stored, whether the key is encrypted at rest, and whether session IDs are persisted; consider using a limited-scope/test key. - The SKILL.md’s instruction to avoid any interim messages while waiting up to 600s is unusual—be aware long requests will appear to 'freeze' the conversation until the API responds. - If you must proceed, audit the saved config.json file, restrict its filesystem permissions, and rotate the API key if you later uninstall or stop trusting the skill. If you want, I can suggest specific questions to ask the publisher about storage/encryption or a safer policy text to propose before you install.

Type: OpenClaw Skill Name: youclaw Version: 1.2.0 The 'youclaw' skill is a marketing analysis tool designed to interface with the Youcloud (Youmiyun) API. It manages API keys through environment variables or local configuration and directs requests to a legitimate domain (aichat.youshu.youcloud.com). The instructions in SKILL.md are focused on operational logic, such as determining the analysis mode and handling long-running API requests, with no evidence of data exfiltration, malicious execution, or harmful prompt injection.