功能描述

Create dress-up style playable ads for mobile advertising platforms like Mintegral. Use when the user needs to create or customize a fashion dress-up interac...

使用说明 (SKILL.md)

Dressup Playable Maker

Name: Dressup Playable Maker
Author: lxnan

Create interactive dress-up playable ads for mobile advertising platforms.

Quick Start

Generate a new playable from template:

python3 scripts/generate.py --input-dir /path/to/assets --output-dir /path/to/output

Required Assets Structure

Input folder should contain:

assets/
├── character/
│   ├── body.png          # Base character body
│   ├── hair/
│   │   ├── hair_1.png
│   │   ├── hair_2.png
│   │   └── hair_3.png
│   ├── dress/
│   │   ├── dress_1.png
│   │   ├── dress_2.png
│   │   └── dress_3.png
│   └── shoes/
│       ├── shoes_1.png
│       ├── shoes_2.png
│       └── shoes_3.png
├── background.jpg        # Game background
└── ui/
    ├── button_bg.png     # Selection button background (optional)
    └── hand_cursor.png   # Hand hint cursor (optional)

Customization Options

Colors

Edit generated config.js:

primaryColor: Main theme color
buttonBorderColor: Selected item border color
backgroundOverlay: Background tint

Layout

Edit generated style.css:

--character-scale: Character size (default: 1.1)
--button-size: Selection button size
--bottom-spacing: Distance from buttons to screen bottom

Output Structure

output/
├── index.html      # Main game file (v57)
├── mraid.js        # MRAID support
└── assets/         # Copied and optimized images

Platform Support

Mintegral: Full support with MRAID 3.0
Other platforms: Generic playable format

Best Practices

Image sizes: Keep character parts under 500KB each
Format: Use PNG for transparency, JPG for backgrounds
Dimensions: Character parts should align at same canvas size
Testing: Always test on actual mobile devices

Version History

v57: Fixed hair/head item selection bug (index mismatch)
v56: Initial version

Advanced: Manual Customization

For full control, edit the generated index.html:

defaultHair, defaultDress, defaultShoes: Set default outfits
gameReady(), gameStart(), gameEnd(): Lifecycle hooks
window.install(): CTA button action

Troubleshooting

Character parts not aligning: Ensure all images have same canvas size and anchor point.

Buttons too small/large: Adjust --button-size in CSS or regenerate with different base size.

Performance issues: Reduce image file sizes, limit to 3-4 clothing items per category.

Selection showing wrong item: Fixed in v57 - ensure using latest template.

安全使用建议

This skill appears to do what it claims: it generates a playable ad package from local image assets using the included Python script and template. Before installing/using it: 1) Inspect the template (assets/template/index.html) to confirm the embedded base64 blob is just image data and to review the CTA URL (it currently opens a Play Store link). 2) Test the generator on a disposable folder to verify output files are as expected. 3) If you will upload generated packages to an ad platform, verify no unexpected analytics/tracking code was added to index.html or mraid.js. 4) Because the template is modified by regex replacements, ensure your template variables match the generator's expectations (or edit the script) so assets are injected correctly. Overall there are no requested credentials or network installers, but always review any third-party asset content before publishing.

功能分析

Type: OpenClaw Skill Name: dressup-playable-maker Version: 1.0.0 The `scripts/generate.py` file uses `shutil.copytree` and `shutil.copy` to process files from a user-specified `--input-dir` and copy them to an `--output-dir`. While this broad file system access is plausible for the skill's stated purpose of generating playable ads from user assets, it represents a significant vulnerability. An attacker could potentially instruct the agent to use sensitive directories (e.g., `/etc`, `~/.ssh`) as the `--input-dir`, leading to unauthorized access and local copying of arbitrary files. There is no evidence of intentional data exfiltration, remote execution, persistence, or malicious prompt injection in `SKILL.md`, but the capability to read and copy arbitrary files makes it suspicious.

能力评估

✓ Purpose & Capability

Name/description (playable dress-up ads) align with included files: a template HTML, an MRAID stub, and a Python generator that copies assets and injects simple config. The files and CLI options are proportionate to the stated purpose.

✓ Instruction Scope

SKILL.md instructs running scripts/generate.py with input and output dirs and editing generated CSS/HTML. The generator operates on local files inside the skill and the user-supplied asset directory; it does not read unrelated system config or environment variables nor send data externally. The index.html includes a CTA that opens a Play Store URL (expected for an ad template).

✓ Install Mechanism

No install spec — instruction-only with bundled template and a small Python script. Nothing is downloaded from external URLs and no archives are extracted. This is low-risk for install mechanism.

✓ Credentials

No required environment variables, no credentials, and no config paths are requested. The skill writes output to the user-provided output directory only. This is proportionate to a local asset-generation tool.

✓ Persistence & Privilege

Skill is not always-enabled and does not attempt to modify other skills or system-wide settings. It only writes generated files into the specified output directory and copies its own mraid.js into that output.

版本历史

v1.0.0

v57 - Fixed hair/head item selection bug

元数据

Slug dressup-playable-maker

版本 1.0.0

许可证 —

累计安装 3

当前安装数 3

历史版本数 1

常见问题