← 返回 Skills 市场
koellins

are.na claw

作者 philkoell · GitHub ↗ · v2.2.0
cross-platform ⚠ suspicious
603
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install arena-claw
功能描述
Simple CLI wrapper for the are.na API. Lists channels, adds blocks, watches feeds. No AI, no automation, no external integrations. Just API calls.
使用说明 (SKILL.md)

are.na-claw

Simple, transparent CLI for are.na API. No AI. No automation. No hidden features.

What This Does

  • Makes API calls to are.na
  • Lists channels and blocks
  • Adds images/links to channels
  • Watches channels for changes
  • Switches between multiple accounts

What This Does NOT Do

  • ✗ AI-powered curation
  • ✗ Automatic content discovery
  • ✗ Cross-platform sync
  • ✗ External integrations
  • ✗ Image analysis or color extraction
  • ✗ Scheduled automation

Installation

# Clone the repository
git clone https://github.com/yourusername/arena-claw ~/arena-claw

# Or copy just the arena script
cp arena-claw/arena ~/bin/arena
chmod +x ~/bin/arena

# Add to PATH (add to ~/.zshrc or ~/.bashrc)
export PATH="$HOME/bin:$PATH"

Source Code

The CLI is a single Python script: arena

It uses only:

  • curl for API calls
  • python3 for parsing
  • Local files for token storage

No dependencies, no external imports.

Authentication

Your API token stays on your machine.

Tokens are stored locally:

  • Single account: ~/.arena_token
  • Multi-account: ~/.openclaw/.arena_tokens

The skill never sends your tokens anywhere except to are.na API.

# Add your account
arena auth YOUR_API_TOKEN

# Or add named account
arena auth YOUR_API_TOKEN myaccount

# Switch accounts
arena switch myaccount

# List accounts
arena accounts

Usage

# Check your account
arena me

# List your channels
arena channels

# Get channel contents
arena channel channel-name

# Add image to channel
arena add image https://example.com/image.jpg --channel my-channel

# Add link to channel  
arena add link https://example.com --channel my-channel --title "Example"

# Watch for new items
arena watch channel-name --interval 60

# Search channels
arena search glitch

# Create channel
arena create "my-channel"

Multi-Account

# Add multiple accounts
arena auth TOKEN1 account1
arena auth TOKEN2 account2

# Use specific account
arena -a account1 me
arena -a account2 channel shared-channel

# Switch default account
arena switch account1

Commands

Command Description
arena auth \x3Ctoken> [name] Add API token
arena accounts List configured accounts
arena switch \x3Cname> Switch default account
arena me Show current user
arena channels [user] List channels
arena channel \x3Cslug> Get channel contents
arena add \x3Ctype> \x3Curl> --channel \x3Cname> Add block to channel
arena watch \x3Cslug> Watch for changes
arena search \x3Cquery> Search channels
arena create \x3Ctitle> Create new channel
arena trending Search trending
arena explore \x3Ckeywords> Search by keywords
arena analyze \x3Cslug> Count block types
arena doctor Debug connection

Security

  • No credential harvesting - Tokens stored only in your home directory
  • No external calls - Only talks to api.are.na
  • No data exfiltration - All data stays local
  • No automatic execution - Every command is explicit
  • No dependencies - Only curl and shell built-ins

Uninstall

rm -rf ~/arena-claw
rm ~/.arena_token ~/.openclaw/.arena_tokens

No Warranty

This is a simple wrapper. Use at your own risk. Always verify what commands do before running them.

安全使用建议
Do not run install.sh or any installer until you verify the actual CLI script and its source. Things to do before installing: (1) Confirm the real upstream repository and check that the `arena` Python script is present and readable in that repo; (2) Inspect the script to ensure it only talks to api.are.na and does not transmit tokens elsewhere; (3) Verify where it writes tokens (it claims ~/.arena_token and ~/.openclaw/.arena_tokens) and decide if that storage location and format are acceptable; (4) If a GitHub URL is provided, prefer installing directly from a trusted release or review the file contents locally before making them executable; (5) If anything in the package or its instructions is vague or missing (e.g., the missing `arena` file), treat it as incomplete and avoid running it. Because of the missing main script and contradictory instructions about file writes/config paths, treat this skill as suspicious until its source and contents are verified.
功能分析
Type: OpenClaw Skill Name: arena-claw Version: 2.2.0 The skill bundle appears benign. The `SKILL.md` and `README.md` explicitly state the skill's purpose as a simple CLI wrapper for the are.na API, emphasizing 'No AI, no automation, no external integrations,' and 'No data exfiltration.' The `allowed-tools` in `SKILL.md` restrict Bash execution to `arena:*` with 'No file writes, no exec beyond curl,' which is a strong security control. The `install.sh` script is straightforward, only copying the `arena` script locally and making it executable, with no suspicious network calls or complex logic. There is no evidence of prompt injection, obfuscation, or malicious intent in any of the provided files.
能力评估
Purpose & Capability
The declared purpose (CLI wrapper for are.na) matches required binaries (curl, python3). However, the SKILL.md repeatedly refers to a Python script named `arena` as the single-file CLI, but that script is not present in the file manifest — only install.sh, README.md, and SKILL.md are included. A CLI that relies on a missing executable is incoherent: either the package is incomplete or it expects you to fetch code from an external repository (the README's GitHub URL is placeholder-like).
Instruction Scope
SKILL.md instructs storing API tokens in local files (~/.arena_token, ~/.openclaw/.arena_tokens) and running commands that will write/read those files, yet the skill metadata lists no required config paths. The SKILL.md also claims 'No file writes' in the allowed-tools header while describing token storage and auth commands — this is a direct contradiction about whether local file writes occur.
Install Mechanism
There is no platform install spec; the included install.sh simply copies a local `arena` file into ~/bin. That is low-risk in itself, but since the `arena` file is not included in the manifest, the script as provided will fail or mislead the user unless the missing file is fetched from elsewhere. The README points at a GitHub URL that looks like a placeholder, so confirm the real source before running install.sh.
Credentials
The skill declares no required environment variables (reasonable for a CLI that uses user-provided tokens), but it does implicitly require write/read access to token files in the user's home directory (~/.arena_token and ~/.openclaw/.arena_tokens). Those config paths were not declared in the registry metadata. The absence of declared config paths combined with instructions to store tokens in home directories is an inconsistency users should note.
Persistence & Privilege
The skill does not request always:true and does not declare elevated privileges. Its expected persistence is limited to storing user tokens in home-directory files under the user's control, which is typical for a CLI. Still, because the actual CLI binary/script is missing from the bundle, it's unclear what code would perform those writes.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install arena-claw
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /arena-claw 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.2.0
Security fix: Clear install instructions, single Python script, no contradictory auth. CLI code included with install.sh, consistent instructions across SKILL.md and README.md
v2.1.0
Code refactored: proper argparse with subcommands, type hints, classes for TokenStore and ArenaAPI, better error handling, cleaner structure
v2.0.0
Security fix: Removed overstated AI/automation claims. Made transparent: only does API calls. No hidden features, no external integrations, no credential issues. Simpler, safer, honest.
v1.2.0
Made skill generic - no specific account names, users define their own
v1.1.0
Multi-account support, switch between accounts, -a flag for specific account
v1.0.0
Initial release of are.na-claw: a comprehensive CLI tool for are.na with deep integration and AI-powered features. - Manage channels and blocks, including creation, search, and detailed info retrieval. - Batch operations for import, export, deduplication, and cloning of channels. - Advanced AI curation and discovery: mood board creation, content recommendations, and aesthetic analysis. - Automation and scheduling support with continuous monitoring, digests, and cron integration. - Creative tools for generating zines, playlists, essays, and AI block descriptions. - Collaborative features including sharing, invitations, and team management. - Integrations with Notion, Obsidian, Pinterest, and RSS sources. - Includes troubleshooting and rate limit management commands.
元数据
Slug arena-claw
版本 2.2.0
许可证
累计安装 0
当前安装数 0
历史版本数 6
常见问题

are.na claw 是什么?

Simple CLI wrapper for the are.na API. Lists channels, adds blocks, watches feeds. No AI, no automation, no external integrations. Just API calls. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 603 次。

如何安装 are.na claw?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install arena-claw」即可一键安装,无需额外配置。

are.na claw 是免费的吗?

是的,are.na claw 完全免费(开源免费),可自由下载、安装和使用。

are.na claw 支持哪些平台?

are.na claw 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 are.na claw?

由 philkoell(@koellins)开发并维护,当前版本 v2.2.0。

💬 留言讨论