← 返回 Skills 市场

CSFloat

Name: CSFloat
Author: bluesyparty-src

作者 bluesyparty-src · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1043

总下载

当前安装

版本数

在 OpenClaw 中安装

/install csfloat

功能描述

Queries csfloat.com for data on skins

使用说明 (SKILL.md)

CSFloat Skill

Query CSFloat skins data directly from Clawdbot.

Setup

Get your API key: https://csfloat.com/profile, under the Developer tab
Generate a key by pressing "New Key"
Set environment variables:
```
export CSFLOAT_API_KEY="your-api-key"
```

Usage

All commands use curl to hit the Trello REST API. Use the API key with the "Authorization: " header.

Get all listings

curl -s "https://csfloat.com/api/v1/listings" --header "Authorization: $CSFLOAT_API_KEY" --header "Content-Type: application/json" | jq '.data.[] | { "id", "item", "price" }'

Get specific listing

curl -s https://csfloat.com/api/v1/listings/$LISTING_ID --header "Authorization: $CSFLOAT_API_KEY" --header "Content-Type: application/json"

Create a listing

curl -X POST "https://csfloat.com/api/v1/listings" \
-H "Authorization: $LISTING_ID; Content-Type: application/json" \
-d '{"asset_id": 21078095468, "type": "buy_now", "price": 8900, "description": "Just for show", "private": false}'

Creating a listing uses the following body parameters:

Parameter	Default	Description	Optional
type	buy_now	Either `buy_now` or `auction`	YES
asset_id		The ID of the item to list	NO
price		Either the `buy_now` price or the current bid or reserve price on an `auction`	NO (if `buy_now`)
max_offer_discount	Set in user profile	`buy_now` max discount for an offer. This will override the default set in your profile.	YES
`reserve_price`		`auction` start price	NO (if `auction`)
duration_days		`auction` duration in days. Can be: 1, 3, 5, 7, or 14	NO (if `auction`)
description		User defined description. Max characters of 180.	YES
private	false	If true, will hide listings from public searches	YES

Notes

Asset ids are from Steam

安全使用建议

The skill appears to be a simple API wrapper but the SKILL.md has clear copy/paste and header formatting errors. Before installing or using it: (1) verify the API and header format in the official docs (Authorization may require a 'Bearer ' prefix or a specific header format); (2) fix the Create-listing curl to use -H "Authorization: $CSFLOAT_API_KEY" and a separate -H "Content-Type: application/json" and ensure the POST body is correct; (3) confirm $LISTING_ID is only a command-specific placeholder (not an env var) and will not be used for auth; (4) avoid running commands that echo secrets into logs or public terminals, and limit the API key scope if csfloat supports scoped keys; (5) ask the publisher to correct the SKILL.md (remove the Trello reference and fix examples) — if they cannot or will not, treat the skill as untrustworthy and do not provide your API key.

功能分析

Type: OpenClaw Skill Name: csfloat Version: 1.0.0 The skill bundle is benign. It provides instructions and `curl` commands to interact with the csfloat.com API, requiring an API key. While there is a typo in the `SKILL.md` referring to 'Trello REST API' instead of 'CSFloat REST API' and a functional error in the 'Create a listing' command where `$LISTING_ID` is mistakenly used in the `Authorization` header instead of `$CSFLOAT_API_KEY`, these are functional bugs or typos, not evidence of intentional malicious behavior, data exfiltration, or prompt injection against the agent to perform actions beyond the stated purpose.

能力评估

ℹ Purpose & Capability

The name/description (querying csfloat.com for skins) lines up with requiring jq and an API key. Requiring only CSFLOAT_API_KEY is proportional to the stated purpose.

⚠ Instruction Scope

The SKILL.md repeatedly contains mistakes: it says "hit the Trello REST API" (wrong service), the Create-listing example uses a malformed header (-H "Authorization: $LISTING_ID; Content-Type: application/json") and places the wrong variable in Authorization. These are copy/paste and formatting errors that could lead to incorrect requests or accidental leaks if a user supplies the wrong env var.

✓ Install Mechanism

Instruction-only skill with no install spec — lowest risk. The only runtime dependency is jq, which is reasonable for the provided jq examples.

ℹ Credentials

Only CSFLOAT_API_KEY is declared, which is appropriate. However the instructions reference $LISTING_ID in Authorization for the POST (and use $LISTING_ID as a path variable elsewhere) without declaring it — this is inconsistent and could cause misuse if a user sets unexpected env vars.

✓ Persistence & Privilege

Skill is not always-included, does not request persistent privileges, and does not modify other skills or system settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install csfloat
安装完成后，直接呼叫该 Skill 的名称或使用 /csfloat 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of csfloat skill - Enables querying csfloat.com for data on skins via Clawdbot - Provides setup instructions for API key configuration - Includes example commands for listing, viewing, and creating CSFloat listings - Documents required and optional parameters for listing creation

元数据

Slug csfloat

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题

CSFloat 是什么？

Queries csfloat.com for data on skins. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1043 次。

如何安装 CSFloat？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install csfloat」即可一键安装，无需额外配置。

CSFloat 是免费的吗？

是的，CSFloat 完全免费（开源免费），可自由下载、安装和使用。

CSFloat 支持哪些平台？

CSFloat 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 CSFloat？

由 bluesyparty-src（@bluesyparty-src）开发并维护，当前版本 v1.0.0。