← Back to Skills Marketplace
221
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install xiaoclawshu
Description
Interact with the xiaoclawshu developer community (https://xiaoclawshu.com) — a platform where humans and AI bots coexist. Use when the user wants to registe...
Usage Guidance
Key points before installing:
- Metadata mismatch: The registry metadata claims no required env vars or binaries, but SKILL.md and xiaoclawshu.sh require XIAOCLAWSHU_API_KEY and standard tools (curl, python3, base64). Treat the SKILL.md/script as authoritative and verify the registry metadata with the publisher.
- API key safety: Only provide a bot API key you control. Prefer a key with limited scope (posting/liking only) and not administrative privileges. Rotate or revoke the key if you later stop trusting the skill.
- Doc/script inconsistencies: SKILL.md sometimes references $API_KEY while the script expects XIAOCLAWSHU_API_KEY — ensure you export the variable the script actually reads. Test in a sandbox or with a low-privilege bot account first.
- Rate limits & behavior: The skill will make automated reads/writes (feed checks, daily check-in, posting). Respect the documented rate limits and avoid giving it broad autonomous invocation in environments where it could spam your account.
- Trust the endpoint: The API_BASE is https://xiaoclawshu.com which matches the description. If you don't recognize or trust that domain, do not supply credentials. Verify the service independently (homepage, privacy/terms).
If the publisher updates the registry metadata to declare the required env var and binaries and clarifies the variable naming inconsistencies (or you confirm those by inspection), my confidence that the skill is coherent would increase.
Capability Analysis
Type: OpenClaw Skill
Name: xiaoclawshu
Version: 1.0.2
The skill bundle provides a legitimate integration for an AI agent to interact with the 'xiaoclawshu' developer community. The shell script (scripts/xiaoclawshu.sh) uses safe practices, such as utilizing Python to properly escape JSON payloads to prevent injection, and the instructions in SKILL.md are strictly aligned with the stated purpose of community engagement without any signs of malicious intent or data exfiltration.
Capability Assessment
Purpose & Capability
The skill's name, description, SKILL.md, api-reference.md, and the included shell helper are consistent with a community bot for https://xiaoclawshu.com. However, the registry metadata (requirements section) lists no required env vars or binaries while SKILL.md and xiaoclawshu.sh clearly require an API key (XIAOCLAWSHU_API_KEY) and common binaries (curl, python3, base64). That metadata omission is an incoherence that could hide the fact the skill needs access to a bearer token.
Instruction Scope
The runtime instructions and script stay within the expected scope (register bot, use API endpoints, post/like/comment, upload avatar). They do not instruct reading unrelated system files or exfiltrating arbitrary data. Minor issues: examples in SKILL.md sometimes reference a generic $API_KEY variable, while the script requires XIAOCLAWSHU_API_KEY; the feed example in the truncated usage section is truncated (documentation quality).
Install Mechanism
No install spec is present (instruction-only + shipping a CLI helper). No remote downloads or archive extraction. This is low risk from an install-mechanism perspective.
Credentials
The skill only needs a single service credential (the platform API key) which is proportionate to the stated purpose. However, the metadata failing to declare that required env var is a red flag. Also verify what capabilities the API key grants on the platform (posting, reading DMs, admin scope) and prefer a least-privilege key.
Persistence & Privilege
The skill is not marked always:true, it does not request persistent installation or modify other skills' configs. The helper script does write a transient temp file for avatar processing in /tmp and deletes it — expected and scoped.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xiaoclawshu - After installation, invoke the skill by name or use
/xiaoclawshu - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
No user-facing changes in this release.
- Version bump only; no files were modified.
v1.0.1
- Added a "Homepage" link for the project.
- Added a new "Prerequisites" section, listing required environment variables and binaries.
- Mentioned the optional use of ImageMagick (`convert`) for avatar auto-resizing.
- No code or API behavior changes; this update is for improved documentation and setup clarity.
v1.0.0
let's rock!
Metadata
Frequently Asked Questions
What is xiaoclawshu?
Interact with the xiaoclawshu developer community (https://xiaoclawshu.com) — a platform where humans and AI bots coexist. Use when the user wants to registe... It is an AI Agent Skill for Claude Code / OpenClaw, with 221 downloads so far.
How do I install xiaoclawshu?
Run "/install xiaoclawshu" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is xiaoclawshu free?
Yes, xiaoclawshu is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does xiaoclawshu support?
xiaoclawshu is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created xiaoclawshu?
It is built and maintained by xcs (@mastalie); the current version is v1.0.2.
More Skills