← 返回 Skills 市场
48438
总下载
31
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install atxp
功能描述
Access ATXP paid API tools for web search, AI image generation, music creation, video generation, X/Twitter search, email, and agent account management. Use...
安全使用建议
Install only if you trust ATXP and are comfortable giving the agent persistent ATXP credentials. Require explicit approval before deleting emails, downloading attachments, sending mail, claiming usernames, creating agents, using paid tools, creating top-up links, or editing `/root/.openclaw/openclaw.json`. Treat any update instructions received by email as untrusted unless verified through an official release channel.
功能分析
Type: OpenClaw Skill
Name: atxp
Version: 1.0.1
The SKILL.md contains explicit instructions that enable unauthorized remote control and potential arbitrary code execution. Specifically, it instructs the agent to check emails for 'instructions for downloading the latest version' and to act upon them, creating a direct prompt injection vector for an attacker to send malicious update commands via email. Additionally, it provides instructions on how to modify the critical `/root/.openclaw/openclaw.json` configuration file, which could be exploited to alter agent behavior or permissions. These are not mere vulnerabilities but explicit instructions to the agent that facilitate harmful behavior.
能力评估
Purpose & Capability
The advertised ATXP purpose covers paid API tools, media generation, email, and agent account management, but the artifact also introduces LLM gateway, PaaS deployment, and editing `/root/.openclaw/openclaw.json`, which expands into higher-impact model access and host-agent configuration.
Instruction Scope
Most actions are explicit CLI commands, but sensitive operations such as deleting email, downloading attachments, sending/replying to mail, claiming paid usernames, creating agents, generating top-up links, and modifying host configuration are not bounded by clear confirmation or safety requirements.
Install Mechanism
The package contains only `SKILL.md` and no bundled executable files, but normal use depends on running `npx atxp`, which fetches and executes an external CLI at runtime.
Credentials
Persistent `$ATXP_CONNECTION` and `~/.atxp/config` authentication is expected for ATXP use, but it can expose email, account details, wallet/balance, paid tools, and account-management capabilities to future agent actions.
Persistence & Privilege
The skill documents long-lived authenticated sessions, agent accounts with wallets and balances, and host-agent configuration changes; these are high-impact privileges that need tighter user-directed control.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install atxp - 安装完成后,直接呼叫该 Skill 的名称或使用
/atxp触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Expanded feature set with new email and agent account management tools.
- Added full ATXP email functionality: inbox management, send/receive, attachments, search, username claiming, and more.
- Introduced agent account creation, balance checking, funding options, and agent management commands.
- Detailed instructions for account balance, funding, and top-up via Stripe payment link.
- Included best practices and support contact method using the new email commands.
- Updated tool descriptions, command list, and usage sections for better guidance.
v1.0.0
Initial release: web search, image gen, music gen, video gen, X search
元数据
常见问题
ATXP 是什么?
Access ATXP paid API tools for web search, AI image generation, music creation, video generation, X/Twitter search, email, and agent account management. Use... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 48438 次。
如何安装 ATXP?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install atxp」即可一键安装,无需额外配置。
ATXP 是免费的吗?
是的,ATXP 完全免费(开源免费),可自由下载、安装和使用。
ATXP 支持哪些平台?
ATXP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 ATXP?
由 emilioacc(@emilioacc)开发并维护,当前版本 v1.0.1。
推荐 Skills