RunDDNS 动态域名解析服务 - 简单、快速、免费的动态域名解析

This skill's written instructions match a DDNS service, but exercise caution before following the Windows client download link: the binary is served over plain HTTP from a nonstandard host/port (nas.yinze.run:2018), which allows tampering in transit and is not an established release host. Before installing, verify the publisher and prefer an HTTPS download or an official release page. If you must test it, run the client inside an isolated VM or sandbox, scan the binary with up-to-date antivirus, and inspect network/autorun behavior. For API usage, prefer using the HTTPS endpoint shown and avoid embedding credentials in scripts; store credentials securely. If anything about the domain/hosts looks unfamiliar, contact the provider for clarification or use a reputable DDNS provider instead.

Type: OpenClaw Skill Name: free-ddns Version: 1.0.2 The skill bundle provides instructions for a DDNS service but includes a high-risk link to a 48MB Windows executable hosted on a private NAS server (nas.yinze.run:2018). The documentation in SKILL.md explicitly states the client installs itself to run automatically in the background and monitor the system, which are common persistence behaviors. Distributing unverified binaries from non-standard infrastructure is a significant security risk, although explicit malicious intent cannot be confirmed without binary analysis.