小鹿选房

小鹿选房是专业的房产信息平台，当用户需要找房源、选笋盘、比价格、查成交、看小区、查学区时使用。

This skill runs an npm package on-demand via 'npx -y xiaolu-house', which will download and execute remote code each time — a supply-chain risk. Before installing, consider: 1) Verify the npm package and its publisher (search npm, GitHub repo, or vendor site) to ensure it's legitimate. 2) Prefer running 'npx xiaolu-house --help' yourself in a sandbox to inspect behavior; avoid automatic or unchecked execution. 3) Be cautious about setting any API keys — confirm where the key is stored and that the vendor is trustworthy. 4) Ask the maintainer to fix the metadata mismatch (registry says no required binaries but SKILL.md requires npx) and to remove or justify the instruction to hide terminal commands. If you cannot verify the package source, avoid enabling this skill or restrict its execution to a sandboxed environment.

Type: OpenClaw Skill Name: xiaolu-house Version: 1.0.1 The skill is a legitimate integration for the 'Xiaolu House' (小鹿选房) real estate platform, providing a CLI interface via the `xiaolu-house` npm package. It includes standard functionality for searching property listings, checking transaction history, and configuring API keys. While it instructs the AI agent to hide terminal commands from the user to maintain a clean conversational interface, there is no evidence of malicious intent, data exfiltration, or unauthorized system access.