← 返回 Skills 市场
miscocox

Antom Copilot

作者 miscocox · GitHub ↗ · v2.0.6 · MIT-0
cross-platform ⚠ suspicious
164
总下载
18
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install antom-copilot
功能描述
Antom Intelligent Assistant - Central control for all Antom-related requirements, intelligently analyzes user intent and delegates to the Payment Success Rat...
使用说明 (SKILL.md)

Antom Copilot

Hello! I am the Antom Intelligent Assistant, your dedicated Antom business expert. I can help you handle all Antom-related queries and operations.

🔧 Initial Setup

Before using Antom Copilot, you need to configure your merchant information:

Configuration File Location

  • macOS/Linux: ~/antom/conf.json
  • Windows: %USERPROFILE%\\antom\\conf.json

Configuration Parameters

The configuration file needs to include the following parameters:

{
  "merchant_token": "Your Merchant Token",
  "email_conf": {
    "smtp_server": "smtp.gmail.com",
    "smtp_port": 587,
    "username": "[email protected]",
    "password": "your-app-password",
    "use_tls": true
  }
}

Configuration Parameter Description:

  • merchant_token: Merchant Token (required, for API authentication)
  • email_conf: Email configuration (required, for sending reports)

How to Obtain Configuration Information

You can visit the Antom Portal to get your merchant_token:

🔗 Antom Portal Address: https://dashboard.antom.com/

In the portal, you can:

  1. Log in to your merchant account
  2. Ask antom copilot for the merchant token, for example: "I need to get the merchant token for antom copilot skill"
  3. If you have questions, you can contact Antom technical support

💡 Tip: Keep your merchant_token secure and do not share it with others.

Sub-Expert Team

📊 Payment Success Rate Expert

Focused on payment success rate data processing and report generation:

  • Pull merchant payment success rate data (query_antom_psr_data.py)
  • Analyze data and generate PDF reports (analyse_and_gen_report.py)
  • Send payment success rate reports (send_psr_report.py)

Intent Recognition and Delegation Rules

When you ask questions, I will analyze your intent and automatically delegate to the Payment Success Rate Expert for:

  • Pull payment success rate data
  • Generate payment success rate reports
  • Send payment success rate reports

Current Status

The Payment Success Rate Expert is ready:

  • ✅ Payment Success Rate Expert: payment_success_rate_expert helloworld!

You can now ask any payment success rate related questions!

安全使用建议
This skill appears to implement the advertised reporting pipeline, but several things don't add up and you should verify before installing or providing secrets: - Confirm the API endpoint(s): the payment_expert SKILL.md mentions an AlipayPlus endpoint, but the query script uses https://antomaplusai.antom.com/... — verify which domain is legitimate for your merchant account before giving a merchant_token. - The skill requires a conf.json with merchant_token and full SMTP credentials (including your email password or app-specific password). These are sensitive; only provide them if you trust the code and domain. Consider using an app-specific email password and a least-privilege mailbox. - Metadata omission: the registry lists no required credentials or config paths even though the scripts depend on conf.json. This reduces transparency — treat that as a red flag. - Inconsistencies in code: different scripts have different data-validation rules and the package references helper scripts (generate_today_report.sh) that are not present, which suggests sloppy packaging. Test in an isolated environment first (e.g., VM or container) and review the full source yourself. - Audit network behavior: run the query script in a controlled environment and inspect outbound requests to ensure data is sent only to the expected Antom domain. If possible, verify domain ownership (DNS, TLS certs) or ask the vendor for authoritative documentation. If you decide to use it: do so in an isolated/limited environment, back up critical data, limit SMTP credential scope, and verify endpoints and code integrity. If you cannot verify the domain or code author, treat providing credentials as high risk.
功能分析
Type: OpenClaw Skill Name: antom-copilot Version: 2.0.6 The skill bundle is a functional business tool designed to fetch payment data from the Antom platform, generate PDF analytics reports, and email them to users. The scripts (query_antom_psr_data.py, analyse_and_gen_report.py, and send_psr_report.py) use standard libraries like requests and smtplib to perform their stated tasks. While the requirement for users to store SMTP credentials and API tokens in a local JSON file (~/antom/conf.json) represents a security vulnerability regarding secret management, there is no evidence of malicious intent, obfuscation, or unauthorized data exfiltration. The instructions in SKILL.md are consistent with the code's logic and the legitimate Antom/Alipay+ service domains.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
Name/description and included scripts align with a Payment Success Rate reporting capability: query data, analyze/generate PDF, and email reports. That functionality reasonably requires a merchant credential and SMTP credentials. However there are inconsistencies across the package (different document endpoints mentioned in SKILL.md vs. the actual API endpoint in the query script), and the registry metadata does not declare the sensitive credentials the code actually needs (merchant_token and SMTP password).
Instruction Scope
Runtime instructions require a local config file (~/antom/conf.json or %USERPROFILE%\antom\conf.json) containing merchant_token and full email_conf (including SMTP password). The code reads this file and uses the merchant_token to POST to an external API and uses SMTP credentials to send mail — these actions are consistent with the stated purpose. Concerns: (1) the payment_expert SKILL.md lists an AlipayPlus/ibotservice endpoint but the query script posts to https://antomaplusai.antom.com/... — mismatched endpoints should be verified; (2) some scripts enforce different data-validity rules (one allows card OR apm, another requires both), indicating sloppy/contradictory logic; (3) SKILL.md references convenience scripts (./generate_today_report.sh) that are not included.
Install Mechanism
This is instruction-only / scripts-only with no install spec. Dependencies are listed in requirements.txt (requests, matplotlib, reportlab, numpy) which matches the code (HTTP calls, plotting, PDF generation). No downloads from unknown URLs and nothing is written to system-wide locations beyond the user's ~/antom folder. This is a lower install risk, but the package will write and read files under the user's home directory.
Credentials
The skill requires (via its instructions and code) sensitive secrets: a merchant_token and SMTP credentials (username and password/app-password) stored in a local conf.json. These secrets are necessary for the advertised functionality, so they are proportionate in purpose — but the skill's registry metadata does not declare these requirements (no required env vars, primary credential, or config-path declarations). The lack of declared credentials in metadata reduces transparency and is a security/operational concern. Also the code will cause those secrets to be used to contact external endpoints and to log into SMTP, so users should be aware.
Persistence & Privilege
The skill does not request 'always: true' and is user-invocable; it does not attempt to modify other skills or system-wide settings. Its persistence is limited to creating/reading files within ~/antom (or %USERPROFILE%\antom on Windows).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install antom-copilot
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /antom-copilot 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.6
Version 2.0.6 of antom-copilot - No file changes detected for this release. - All features and documentation remain unchanged.
v2.0.2
Version 2.0.1 of antom-copilot - No file changes detected in this release. - Documentation and user instructions remain unchanged. - Existing features and capabilities are maintained.
v2.0.0
Remove hard-coded tokens
v1.0.0
Antom Copilot 1.0.0 – Initial Release - Introduces Antom Intelligent Assistant for handling all Antom-related queries and operations. - Requires setup with a configuration file containing merchant token and email details. - Integrates a Payment Success Rate Expert for analyzing and reporting payment success data. - Supports automatic intent recognition and delegation to the sub-expert. - Provides clear guidance on setup, configuration, and usage.
元数据
Slug antom-copilot
版本 2.0.6
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Antom Copilot 是什么?

Antom Intelligent Assistant - Central control for all Antom-related requirements, intelligently analyzes user intent and delegates to the Payment Success Rat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 164 次。

如何安装 Antom Copilot?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install antom-copilot」即可一键安装,无需额外配置。

Antom Copilot 是免费的吗?

是的,Antom Copilot 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Antom Copilot 支持哪些平台?

Antom Copilot 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Antom Copilot?

由 miscocox(@miscocox)开发并维护,当前版本 v2.0.6。

💬 留言讨论