← Back to Skills Marketplace
xiaoyiweio

Brown Dust 2

by XiaoYiWeio · GitHub ↗ · v1.1.1 · MIT-0
cross-platform ⚠ suspicious
277
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install brown-dust-2
Description
Brown Dust 2 全自动工具 — 每日/每周签到 + 活动出席签到 + 兑换码全自动兑换。触发词:BD2、棕色尘埃、brown dust、签到、兑换码、redeem。
README (SKILL.md)

Brown Dust 2 Automation

棕色尘埃2 全自动签到 + 兑换码兑换。

触发规则

模式 示例
包含 BD2 / 棕色尘埃 / brown dust "BD2签到", "棕色尘埃兑换码"
包含 签到 + 游戏相关 "帮我BD2签到", "BD2每日签到"
包含 兑换码 / redeem / gift code "BD2兑换码", "redeem BD2 codes"

三大功能

功能 1 — Web Shop 签到(纯 API)

每日签到 + 每周签到 + 活动出席,一条命令搞定。

# 执行全部签到
python3 {baseDir}/scripts/signin.py

# 查看活动信息
python3 {baseDir}/scripts/signin.py --event-info

# 仅每日签到
python3 {baseDir}/scripts/signin.py --daily-only

功能 2 — 兑换码自动兑换(纯 API)

自动从 BD2Pulse 抓取最新兑换码 → 调用官方 API 一键兑换。

# 自动抓取 + 全部兑换
python3 {baseDir}/scripts/redeem.py

# 只看有哪些码
python3 {baseDir}/scripts/redeem.py --list

功能 3 — 全套自动化

先签到再兑换码,一次跑完。

前置要求

功能 需要什么 如何获取
签到 Web Shop accessToken 浏览器登录后提取(详见 persona.md)
兑换码 游戏内昵称 --save-nickname "昵称"

Token 设置(首次 / 过期时)

Agent 应通过浏览器工具自动提取 Token:

  1. 用 browser 工具打开 https://webshop.browndust2.global/CT/
  2. 等待页面加载 + 用户登录
  3. 用 evaluate 执行 JS 提取 token:
    JSON.parse(localStorage.getItem("session-storage")).state.session.accessToken
    
  4. 保存 token:python3 signin.py --save-token "{token}"

如果自动提取失败,引导用户手动操作: F12 → Console → 粘贴上述 JS → 把结果告诉 Agent

Usage Guidance
This skill appears to implement the advertised features, but it needs your Web Shop accessToken (it instructs the agent to extract it from your browser's localStorage) and it posts redeem requests to an AWS execute-api endpoint whose operator is not documented. Before installing: 1) Understand that providing the accessToken lets the skill (and any agent runtime that sees it) act on your Web Shop account — only proceed if you trust the skill source. 2) Inspect the redeem endpoint (loj2urwaua.execute-api.ap-northeast-1.amazonaws.com) and confirm its legitimacy; ask the author why it's used instead of the official domain. 3) If you proceed, prefer manual token entry rather than automated extraction, store the token with minimal file permissions, and rotate/revoke the token if you stop using the skill. 4) Run the scripts locally first and review network calls (e.g., via a proxy) if you have doubts. If you cannot verify the redeem endpoint or trust the owner, do not provide your token.
Capability Analysis
Type: OpenClaw Skill Name: brown-dust-2 Version: 1.1.1 The skill bundle provides automation for Brown Dust 2 game check-ins and coupon redemption. It uses two Python scripts (signin.py and redeem.py) that interact with official game APIs (pmang.cloud) and a community resource (thebd2pulse.com) using standard libraries. The instructions guide the AI agent to help users extract their session token from the official web shop and store it locally with restricted file permissions. No evidence of data exfiltration, malicious execution, or unauthorized access was found; all behaviors are strictly aligned with the stated purpose.
Capability Assessment
Purpose & Capability
Name/description, README, SKILL.md and the two scripts are coherent: signin.py uses a Web Shop accessToken to call the webshop API; redeem.py scrapes BD2Pulse and posts codes to a redeem API. However, the redeem API URL in scripts (https://loj2urwaua.execute-api.ap-northeast-1.amazonaws.com/...) is not the same host as the webshop API/domain referenced elsewhere (bd2.pmang.cloud) and is not documented in README/SKILL.md as an official endpoint — this is unexplained and could be either a legitimate gateway or a third‑party proxy.
Instruction Scope
SKILL.md and persona.md instruct the agent to open the user's browser, snapshot the page, and evaluate JS to extract localStorage.session-session.accessToken. That action will expose the user's authenticated accessToken to the agent (and to any runtime that logs or transmits agent context). The agent is also told to capture snapshots (maxChars up to 30000), which may include other page state. These steps are functionally necessary to obtain the token but are sensitive and should be explicit to the user.
Install Mechanism
No install spec; instruction-only with included Python scripts. No downloads, no package installs, no archive extraction — low installation risk.
Credentials
The skill requests no environment variables or external credentials but requires access to the user's browser session to extract a bearer token and writes that token to a local file (.token). Accessing and storing a bearer token is proportionate to performing sign-ins, but it is sensitive: the token grants the ability to act as the user on the Web Shop. The redeem flow also transmits the user's nickname and codes to an AWS execute‑api endpoint whose ownership is unclear.
Persistence & Privilege
No 'always: true'. The scripts save a .token and .nickname file inside the skill workspace (normal for credentials/config). The skill does not request system-wide configuration changes or other skills' credentials.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install brown-dust-2
  3. After installation, invoke the skill by name or use /brown-dust-2
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
fix: add Origin header to coupon API — fixes BadRequest
v1.1.0
v1.1.0 — API-based daily/weekly/event sign-in + gift code redemption
v1.0.0
v1.0.0 — API-based gift code redemption + improved daily sign-in
v0.2.0
v0.2.0 - Auto login support: Click Sign In → Wait 10s → Select Google account → Wait 30s → Auto check-in
Metadata
Slug brown-dust-2
Version 1.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is Brown Dust 2?

Brown Dust 2 全自动工具 — 每日/每周签到 + 活动出席签到 + 兑换码全自动兑换。触发词:BD2、棕色尘埃、brown dust、签到、兑换码、redeem。 It is an AI Agent Skill for Claude Code / OpenClaw, with 277 downloads so far.

How do I install Brown Dust 2?

Run "/install brown-dust-2" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Brown Dust 2 free?

Yes, Brown Dust 2 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Brown Dust 2 support?

Brown Dust 2 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Brown Dust 2?

It is built and maintained by XiaoYiWeio (@xiaoyiweio); the current version is v1.1.1.

💬 Comments