友行

查询友行青年社群的活动信息。当用户询问友行的活动、近期活动、活动安排、某个活动详情时使用。支持列出所有活动和根据活动ID获取详情。默认输出JSON，用户要求时可输出Markdown格式。

This skill appears to do what it says (query activities from api.cumen.fun) but note two practical cautions: (1) The runtime instructions require Node.js (they run 'node -e'), yet the manifest does not declare Node as a required binary — ensure your agent environment actually has Node available or the snippets won’t run. (2) The skill calls an external API (api.cumen.fun) and may return precise addresses and coordinates; only use it if you trust that endpoint. The skill's source and homepage are unknown, so if you need stronger assurance, ask the publisher for the source repo or a trusted homepage, or run the requests from a sandboxed environment and inspect responses before exposing them to users.

Type: OpenClaw Skill Name: youxing Version: 1.0.0 The skill bundle uses 'node -e' to execute JavaScript code for querying the 'api.cumen.fun' API. While the functionality aligns with the stated purpose of fetching community activity data, the implementation in SKILL.md relies on the AI agent performing string replacement for parameters like 'CAMPAIGN_ID' directly into the code block. This pattern creates a code injection vulnerability if the input is not strictly validated, as a malicious activity ID could execute arbitrary Node.js code.