← 返回 Skills 市场
Brown Dust 2
作者
XiaoYiWeio
· GitHub ↗
· v1.1.1
· MIT-0
277
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install brown-dust-2
功能描述
Brown Dust 2 全自动工具 — 每日/每周签到 + 活动出席签到 + 兑换码全自动兑换。触发词：BD2、棕色尘埃、brown dust、签到、兑换码、redeem。
使用说明 (SKILL.md)
Brown Dust 2 Automation
棕色尘埃2 全自动签到 + 兑换码兑换。
触发规则
| 模式 | 示例 |
|---|---|
包含 BD2 / 棕色尘埃 / brown dust |
"BD2签到", "棕色尘埃兑换码" |
包含 签到 + 游戏相关 |
"帮我BD2签到", "BD2每日签到" |
包含 兑换码 / redeem / gift code |
"BD2兑换码", "redeem BD2 codes" |
三大功能
功能 1 — Web Shop 签到（纯 API）
每日签到 + 每周签到 + 活动出席，一条命令搞定。
# 执行全部签到
python3 {baseDir}/scripts/signin.py
# 查看活动信息
python3 {baseDir}/scripts/signin.py --event-info
# 仅每日签到
python3 {baseDir}/scripts/signin.py --daily-only
功能 2 — 兑换码自动兑换（纯 API）
自动从 BD2Pulse 抓取最新兑换码 → 调用官方 API 一键兑换。
# 自动抓取 + 全部兑换
python3 {baseDir}/scripts/redeem.py
# 只看有哪些码
python3 {baseDir}/scripts/redeem.py --list
功能 3 — 全套自动化
先签到再兑换码，一次跑完。
前置要求
| 功能 | 需要什么 | 如何获取 |
|---|---|---|
| 签到 | Web Shop accessToken | 浏览器登录后提取（详见 persona.md） |
| 兑换码 | 游戏内昵称 | --save-nickname "昵称" |
Token 设置（首次 / 过期时）
Agent 应通过浏览器工具自动提取 Token：
- 用 browser 工具打开
https://webshop.browndust2.global/CT/- 等待页面加载 + 用户登录
- 用 evaluate 执行 JS 提取 token：
JSON.parse(localStorage.getItem("session-storage")).state.session.accessToken- 保存 token：
python3 signin.py --save-token "{token}"如果自动提取失败，引导用户手动操作： F12 → Console → 粘贴上述 JS → 把结果告诉 Agent
安全使用建议
This skill appears to implement the advertised features, but it needs your Web Shop accessToken (it instructs the agent to extract it from your browser's localStorage) and it posts redeem requests to an AWS execute-api endpoint whose operator is not documented. Before installing: 1) Understand that providing the accessToken lets the skill (and any agent runtime that sees it) act on your Web Shop account — only proceed if you trust the skill source. 2) Inspect the redeem endpoint (loj2urwaua.execute-api.ap-northeast-1.amazonaws.com) and confirm its legitimacy; ask the author why it's used instead of the official domain. 3) If you proceed, prefer manual token entry rather than automated extraction, store the token with minimal file permissions, and rotate/revoke the token if you stop using the skill. 4) Run the scripts locally first and review network calls (e.g., via a proxy) if you have doubts. If you cannot verify the redeem endpoint or trust the owner, do not provide your token.
功能分析
Type: OpenClaw Skill
Name: brown-dust-2
Version: 1.1.1
The skill bundle provides automation for Brown Dust 2 game check-ins and coupon redemption. It uses two Python scripts (signin.py and redeem.py) that interact with official game APIs (pmang.cloud) and a community resource (thebd2pulse.com) using standard libraries. The instructions guide the AI agent to help users extract their session token from the official web shop and store it locally with restricted file permissions. No evidence of data exfiltration, malicious execution, or unauthorized access was found; all behaviors are strictly aligned with the stated purpose.
能力评估
Purpose & Capability
Name/description, README, SKILL.md and the two scripts are coherent: signin.py uses a Web Shop accessToken to call the webshop API; redeem.py scrapes BD2Pulse and posts codes to a redeem API. However, the redeem API URL in scripts (https://loj2urwaua.execute-api.ap-northeast-1.amazonaws.com/...) is not the same host as the webshop API/domain referenced elsewhere (bd2.pmang.cloud) and is not documented in README/SKILL.md as an official endpoint — this is unexplained and could be either a legitimate gateway or a third‑party proxy.
Instruction Scope
SKILL.md and persona.md instruct the agent to open the user's browser, snapshot the page, and evaluate JS to extract localStorage.session-session.accessToken. That action will expose the user's authenticated accessToken to the agent (and to any runtime that logs or transmits agent context). The agent is also told to capture snapshots (maxChars up to 30000), which may include other page state. These steps are functionally necessary to obtain the token but are sensitive and should be explicit to the user.
Install Mechanism
No install spec; instruction-only with included Python scripts. No downloads, no package installs, no archive extraction — low installation risk.
Credentials
The skill requests no environment variables or external credentials but requires access to the user's browser session to extract a bearer token and writes that token to a local file (.token). Accessing and storing a bearer token is proportionate to performing sign-ins, but it is sensitive: the token grants the ability to act as the user on the Web Shop. The redeem flow also transmits the user's nickname and codes to an AWS execute‑api endpoint whose ownership is unclear.
Persistence & Privilege
No 'always: true'. The scripts save a .token and .nickname file inside the skill workspace (normal for credentials/config). The skill does not request system-wide configuration changes or other skills' credentials.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install brown-dust-2 - 安装完成后，直接呼叫该 Skill 的名称或使用
/brown-dust-2触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.1
fix: add Origin header to coupon API — fixes BadRequest
v1.1.0
v1.1.0 — API-based daily/weekly/event sign-in + gift code redemption
v1.0.0
v1.0.0 — API-based gift code redemption + improved daily sign-in
v0.2.0
v0.2.0 - Auto login support: Click Sign In → Wait 10s → Select Google account → Wait 30s → Auto check-in
元数据
常见问题
Brown Dust 2 是什么？
Brown Dust 2 全自动工具 — 每日/每周签到 + 活动出席签到 + 兑换码全自动兑换。触发词：BD2、棕色尘埃、brown dust、签到、兑换码、redeem。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 277 次。
如何安装 Brown Dust 2？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install brown-dust-2」即可一键安装，无需额外配置。
Brown Dust 2 是免费的吗？
是的，Brown Dust 2 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Brown Dust 2 支持哪些平台？
Brown Dust 2 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Brown Dust 2？
由 XiaoYiWeio（@xiaoyiweio）开发并维护，当前版本 v1.1.1。
推荐 Skills