云展网电子画册在线生成器

云展网文件转换在线阅读及分享 Skill。当用户要求将 PDF、PPT、Word(.doc和.docx都可以 无需转换)、JPG 等文件生成可在线浏览的链接/二维码时触发此 Skill。支持文件一键转换成链接/二维码，在线翻页浏览，并可分享至各社交平台。 即使用户没有明确说"链接"或"二维码"，只要意图涉及文件在...

This skill appears to be what it claims: it calls yunzhan365 APIs to upload files and create online flipbooks. Before installing or using it, consider: (1) it asks you to provide your yunzhan username (phone/email) and password—only provide credentials if you trust the skill and the hosting agent; prefer using a test or disposable account if you are unsure; (2) ask how the agent will store the returned token (cptoken) and for how long—avoid long-term storage of tokens unless you trust the environment; (3) verify the API domain (https://www.yunzhan365.com) matches what you expect; (4) the skill will upload files you supply—do not upload sensitive documents you wouldn't want hosted externally; (5) if you require stronger security, prefer workflows with OAuth/token-based delegation or manual token provisioning rather than entering passwords directly into chat.

Type: OpenClaw Skill Name: yunzhan-huace Version: 1.0.0 The skill requires the AI agent to solicit and handle the user's plaintext username and password to obtain an authentication token (SKILL.md). While the API endpoints are directed at the legitimate service (yunzhan365.com), this is a high-risk credential handling practice. Furthermore, the instructions explicitly tell the agent to hide the script execution process from the user, which reduces transparency regarding how the credentials and data are being processed.