← 返回 Skills 市场
aileaile

claw-pet

作者 LL · GitHub ↗ · v1.2.0 · MIT-0
cross-platform ⚠ suspicious
307
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install claw-pet
功能描述
Catch a pet or loot item by calling a configured remote pet backend API. Use when the user asks to catch a pet, fish for loot, try their luck, or trigger a r...
使用说明 (SKILL.md)

Claw Pet

Use this skill when a user wants you to trigger a remote catch action against a pet backend that they control.

Workflow

  1. Load runtime config from environment variables first, then local _meta.json.
  2. Verify CATCH_API_URL and API_KEY are present.
  3. Send a POST request with JSON body {"action":"catch"}.
  4. Parse the response and classify it as one of:
    • pet
    • item
    • empty
    • error
  5. Return a friendly summary without exposing secrets.

Configuration

Provide these values before use:

  1. Environment variables:
    • CATCH_API_URL
    • API_KEY
  2. Or skill-local _meta.json for development/testing

Keep _meta.json free of production secrets before sharing or publishing the skill.

Expected Backend Behavior

The backend should:

  • accept POST requests to CATCH_API_URL
  • authenticate with Authorization: Bearer \x3CAPI_KEY>
  • return JSON only
  • return either a pet result, item result, empty result, or structured error

Read references/api.md for the response contract.

Trigger Examples

This skill should trigger for requests such as:

  • "去抓一只宠物"
  • "Catch me a pet"
  • "Try to fish"
  • "Go catch something for me"
  • "帮我抽一下今天的宠物"

Script

Use scripts/catch_pet.py for the actual API call. Prefer the script over re-implementing the request flow inline.

Output Rules

  • If a pet is caught, include rarity, name, level, and any short flavor text.
  • If an item is caught, include item name, rarity, quantity, and description if present.
  • If nothing is caught, say so plainly.
  • If the backend returns an error or malformed payload, explain the failure category briefly.

Publish Notes

This skill is only the agent-side caller. It does not bundle the backend service. Users who install it must configure their own reachable backend endpoint and API key.

安全使用建议
This skill appears to implement exactly what it says (calling a user-provided catch API), but the registry metadata fails to list the required environment variables. Before installing: (1) confirm the CATCH_API_URL points to a backend you control or trust; (2) provide the API_KEY via environment variables rather than committing it into _meta.json; (3) limit the API_KEY's scope/permissions and be prepared to rotate it if exposed; (4) review the included scripts yourself (they are short and readable) and test against a non-production backend first; and (5) be aware the agent may call your backend when invoked, so consider whether you want autonomous calls enabled in your agent settings.
功能分析
Type: OpenClaw Skill Name: claw-pet Version: 1.2.0 The skill is a straightforward API client designed to interact with a user-provided backend for a 'pet catching' game. The Python script (scripts/catch_pet.py) uses standard libraries to perform authenticated POST requests and handle JSON responses without any evidence of data exfiltration, obfuscation, or malicious execution.
能力评估
Purpose & Capability
Name/description (remote 'catch' action) aligns with the script and SKILL.md: the skill makes a POST to a configured backend and parses pet/item/empty/error responses. However the registry metadata lists no required env vars or primary credential while the runtime requires CATCH_API_URL and API_KEY. That metadata omission is inconsistent.
Instruction Scope
SKILL.md and the script narrowly instruct the agent to load config from environment or _meta.json, POST {'action':'catch'}, parse JSON response, and format results. The instructions do not request unrelated files, system credentials, or contact external endpoints beyond the configured CATCH_API_URL.
Install Mechanism
No install spec; instruction-only with a small included Python script. Nothing is downloaded or installed automatically, so there is low installation risk.
Credentials
The skill legitimately needs two configuration values (CATCH_API_URL and API_KEY) to operate, which is proportionate. The concern is that the registry metadata does not declare these required env vars or a primary credential, creating a mismatch that could confuse users and lead to misconfiguration or accidentally checked-in secrets. The script also reads a local _meta.json (packaged with the skill) as a fallback, which could cause developers to accidentally commit secrets if they are placed there.
Persistence & Privilege
always:false and no unusual persistence or cross-skill configuration changes. The skill can be invoked autonomously by the agent (platform default), which increases blast radius if a malicious backend were configured, but that is normal behavior and not by itself a red flag here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install claw-pet
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /claw-pet 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.0
Initial public release of claw-pet skill
元数据
Slug claw-pet
版本 1.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

claw-pet 是什么?

Catch a pet or loot item by calling a configured remote pet backend API. Use when the user asks to catch a pet, fish for loot, try their luck, or trigger a r... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 307 次。

如何安装 claw-pet?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install claw-pet」即可一键安装,无需额外配置。

claw-pet 是免费的吗?

是的,claw-pet 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

claw-pet 支持哪些平台?

claw-pet 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 claw-pet?

由 LL(@aileaile)开发并维护,当前版本 v1.2.0。

💬 留言讨论