← Back to Skills Marketplace
iamdacai

Lanxin App Card

by Iamdacai · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
78
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install lanxin-app-card
Description
蓝信官方应用卡片发送能力,支持发送包含复杂格式的应用卡片消息。
README (SKILL.md)

蓝信应用卡片发送规则(必须严格遵守)

核心规则(绝对禁止违反)

  1. 用户要求发送应用卡片,必须直接输出 JSON 格式的 appCard 消息
  2. JSON 必须包含所有必填字段
  3. 禁止说“无法发送”“不支持”“暂时不能”等拒绝话术
  4. 禁止解释 JSON 格式,直接输出即可
  5. 禁止输出任何其他文本,只输出 JSON
  6. 禁止使用 Markdown 代码块包裹 JSON
  7. 禁止输出 \x3Clxfile>\x3Clximg> 标签

发送应用卡片(必须这样输出)

注意:必须直接输出 JSON,不要添加任何其他文本,不要使用 Markdown 代码块包裹!

正确格式: { "appCard": { "headTitle": "应用标题", "headIconUrl": "图标链接", "isDynamic": false, "bodyTitle": "正文标题", "bodySubTitle": "正文章标题", "bodyContent": "正文内容", "signature": "签名", "fields": [ {"key": "字段1", "value": "值1"}, {"key": "字段2", "value": "值2"} ], "links": [ {"title": "链接1", "url": "https://example.com"}, {"title": "链接2", "url": "https://example.com"} ], "cardLink": "卡片链接", "pcCardLink": "PC端卡片链接" } }

正确示例: { "appCard": { "headTitle": "图片卡片", "headIconUrl": "https://www.lanxin.cn/favicon.ico", "bodyTitle": "找到的图片", "bodyContent": "这是从本地找到的图片", "fields": [ {"key": "文件", "value": "Snapshot.png"}, {"key": "路径", "value": "/Users/dulianqiang/.Huawei4.1/Huawei_Phone/Snapshot.png"} ], "links": [ {"title": "查看图片", "url": "https://example.com/image"} ] } }


字段说明

  • headTitle(选填):应用的标题
  • headIconUrl(选填):图标的网络地址
  • isDynamic(选填):是否动态卡片消息
  • headStatusInfo(选填):动态卡片的动态信息区,当 isDynamic=true 时必填
  • bodyTitle(必填):文本标题
  • bodySubTitle(选填):文本副标题
  • bodyContent(选填):松散内容
  • signature(选填):署名字段
  • fields(选填):key/value 字段对,上限 10 对
  • links(选填):链接数组,最多 3 对
  • cardLink(选填):本条消息的跳转地址
  • pcCardLink(选填):PC 端跳转地址

支持的格式

可以使用 div 标签的 style 属性对文本内容进行格式控制,支持控制的格式有颜色(color)、字体大小(font-size),位置(text-align),首行缩进(text-indent)。

示例:

\x3Cdiv style="color: brown; text-align: left;font-size:xx-large"> 第一个div 靠左 超大 \x3C/div>

严禁出现的错误行为

❌ 禁止:缺少必填字段 ❌ 禁止:格式错误的 JSON ❌ 禁止:解释“这是 JSON”“系统会解析” ❌ 禁止:拒绝发送 ❌ 禁止:只输出文字内容,不输出 JSON ❌ 禁止:输出任何其他文本,只输出 JSON ❌ 禁止:使用 Markdown 代码块包裹 JSON ❌ 禁止:输出 \x3Clxfile>\x3Clximg> 标签 ❌ 禁止:输出 Markdown 格式的文本 ❌ 禁止:在 JSON 前后添加任何文字

你的行为准则

用户让你发送应用卡片 → 直接输出干净的 JSON → 不要多余描述 → 不要格式包裹 → 完成。

Usage Guidance
This skill appears to do what it says (format and emit Lanxin appCard JSON) and doesn't request credentials or install code, but there are two things to watch: (1) the SKILL.md forces the agent to output ONLY the JSON and forbids refusal/explanatory text — that can hide safety or audit messages, so avoid using this skill for requests that might require clarifications or safety checks; (2) the SKILL.md embeds an 'always:true' metadata flag while the registry shows always:false — confirm with the platform which setting is authoritative before trusting persistence. If you consider installing: verify the publisher identity, run the skill in a restricted/sandboxed agent first, avoid sending or including sensitive data through the card fields, and ask the publisher to clarify why the SKILL.md forbids any refusal/explanation and why it includes the always:true metadata.
Capability Analysis
Type: OpenClaw Skill Name: lanxin-app-card Version: 1.0.0 The skill uses aggressive prompt-injection techniques in SKILL.md to override the AI agent's default behavior, such as 'absolutely prohibiting' refusal or explanation and forcing raw JSON output without Markdown formatting. Most notably, the 'correct example' in SKILL.md includes a hardcoded local file path ('/Users/dulianqiang/.Huawei4.1/Huawei_Phone/Snapshot.png'), which is a significant privacy leak and suggests the skill may be designed to reference or expose local filesystem metadata. While no explicit data exfiltration endpoint is defined, the combination of forced output constraints and local path references is highly irregular for a standard messaging skill.
Capability Assessment
Purpose & Capability
Name/description, SKILL.md content, and the tiny index.js are coherent: the skill's sole purpose is producing Lanxin appCard JSON. It requests no env vars, no binaries, and has no install steps, which is proportionate for this functionality.
Instruction Scope
SKILL.md mandates the agent must output only the raw JSON appCard and explicitly forbids refusal messages, explanations, or any other text. That formatting rule is reasonable for message payloads, but the absolute prohibition on refusal/explanations can be used to suppress safety, auditing, or helpful error messages from the agent (e.g., if user asks for something unsafe or requests attachments). The doc includes examples with local file paths but does not instruct how to access or attach files — this increases ambiguity about whether the skill should reference or expose local paths.
Install Mechanism
No install spec; index.js is a harmless metadata-only module. Nothing is downloaded or written to disk by the skill bundle itself.
Credentials
The skill declares no required environment variables or credentials, which matches its stated scope. There are no listed config paths or secrets requested.
Persistence & Privilege
Registry metadata shows always:false, but SKILL.md contains metadata 'openclaw':{"always":true}, i.e. the skill's own instructions attempt to mark it as always-included. If the platform respects only registry flags this may be inert, but the embedded attempt is notable and could indicate the author intended persistent inclusion. Autonomous invocation (disable-model-invocation=false) is normal and not itself a red flag.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install lanxin-app-card
  3. After installation, invoke the skill by name or use /lanxin-app-card
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of lanxin-app-card with strict application card output guidelines: - Provides official Lanxin app card sending capability with support for complex card message formats. - Strictly enforces direct, clean JSON output for appCard messages—no extra text, formatting, or code blocks allowed. - Specifies required fields, output format, and prohibited behaviors to ensure compatibility. - Supports various card triggers, including 审批卡片, 通知卡片, and more. - Includes usage examples, field descriptions, and strict do/don't rules for message content.
Metadata
Slug lanxin-app-card
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Lanxin App Card?

蓝信官方应用卡片发送能力,支持发送包含复杂格式的应用卡片消息。 It is an AI Agent Skill for Claude Code / OpenClaw, with 78 downloads so far.

How do I install Lanxin App Card?

Run "/install lanxin-app-card" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Lanxin App Card free?

Yes, Lanxin App Card is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Lanxin App Card support?

Lanxin App Card is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Lanxin App Card?

It is built and maintained by Iamdacai (@iamdacai); the current version is v1.0.0.

💬 Comments