← 返回 Skills 市场
105
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install hunterserach
功能描述
用于调用奇安信 Hunter OpenAPI 进行资产批量导出。用户提到 Hunter、资产测绘、批量导出、task_id 下载文件等需求时优先加载本 skill。
使用说明 (SKILL.md)
QAX Hunter Use
First
- 默认走 API 模式，不使用文件上传。
- 查询语法由用户输入，脚本自动做 RFC 4648 base64url 编码。
- 批量任务流程固定为：
- 创建任务
/openApi/search/batch - 查询进度
/openApi/search/batch/{task_id} - 下载结果
/openApi/search/download/{task_id}
- 创建任务
入口脚本
- 主脚本：
scripts/hunter_batch_cli.py - 运行方式：
- AI 无交互推荐：
python3 scripts/hunter_batch_cli.py --no-interactive --api-key "$HUNTER_API_KEY" --search 'web.title="test"' --check-delay 10 --json-output
- 兼容交互：
python3 scripts/hunter_batch_cli.py
- AI 无交互推荐：
参数说明
- 必填：
api-key - 常用可选：
search、start_time、end_time、is_web、status_code、fields、assets_limit - AI 友好参数：
--no-interactive：禁止交互输入，缺参即报错--check-delay：创建任务后等待 N 秒（默认 10）再首次尝试下载--poll-interval/--poll-timeout：轮询控制--output-file：指定下载文件名--json-output：最后输出一行 JSON 结果，便于机器解析
安全注意事项
- 不要将真实
api-key写入仓库文件。 - 推荐使用环境变量注入：
HUNTER_API_KEY。 - 若必须持久化，请使用系统密钥环或加密配置文件，不要明文存储。
安全使用建议
This skill's code matches its description and calls only hunter.qianxin.com, but the package metadata is missing important details. Before installing or using it: 1) Treat HUNTER_API_KEY as a sensitive secret — provide it via environment variable or a secrets manager, not checked into repositories. 2) Run the script in a controlled environment (Python 3 virtualenv) and install requests (pip install -r scripts/requirements.txt). 3) Review the script yourself (it is included) to confirm network endpoints and to ensure you are comfortable with the API-key-in-query behavior; consider modifying it to send the key in an Authorization header if preferred. 4) Because the source is unknown, test with a limited/rotated API key first and avoid granting broader credentials. 5) If you expect the skill metadata to be authoritative, ask the publisher to correct the manifest to declare HUNTER_API_KEY, Python requirement, and any install steps before widespread use.
功能分析
Type: OpenClaw Skill
Name: hunterserach
Version: 1.0.0
The skill is a legitimate integration for the QiAnXin Hunter OpenAPI, used for batch asset mapping and data export. The Python script (scripts/hunter_batch_cli.py) correctly implements the API's workflow, including base64url encoding of queries, task polling, and secure file downloading from official endpoints (hunter.qianxin.com). It follows security best practices by recommending environment variables for API key management and lacks any indicators of data exfiltration, obfuscation, or malicious intent.
能力标签
能力评估
Purpose & Capability
The code and SKILL.md align with the stated purpose (calling 奇安信 Hunter OpenAPI to create/poll/download batch export tasks). However the skill does not declare required environment variables or binaries even though both are necessary: the script expects an API key (HUNTER_API_KEY or --api-key), Python 3 and the requests library. This mismatch between manifest and actual needs is an incoherence.
Instruction Scope
SKILL.md and the CLI script stick to the described workflow: encode search, create task, poll status, download result to a local file. The instructions do not request unrelated files, other credentials, or unexpected external endpoints; network calls are limited to hunter.qianxin.com.
Install Mechanism
There is no install spec (no automated install), which reduces risk, but the repository includes a requirements.txt and a Python script. The skill expects the requests package and Python 3 but the registry metadata did not declare these. The lack of an install step means a user/agent must install dependencies manually or may fail at runtime.
Credentials
The script requires an API key (HUNTER_API_KEY or --api-key) to operate, which is appropriate for the service. However the skill metadata lists no required env vars or primary credential; this omission is a configuration inconsistency that could lead users to unknowingly supply secrets in the wrong way. Also the script sends the API key as a query parameter (api-key) — functional but less private than header-based auth.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It writes downloaded export files to the current working directory, which is expected behavior for this function.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install hunterserach - 安装完成后，直接呼叫该 Skill 的名称或使用
/hunterserach触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
---
name: qax-hunter-use
description: 用于调用奇安信 Hunter OpenAPI 进行资产批量导出。用户提到 Hunter、资产测绘、批量导出、task_id 下载文件等需求时优先加载本 skill。
---
# QAX Hunter Use
## First
- 默认走 API 模式，不使用文件上传。
- 查询语法由用户输入，脚本自动做 RFC 4648 base64url 编码。
- 批量任务流程固定为：
1) 创建任务 `/openApi/search/batch`
2) 查询进度 `/openApi/search/batch/{task_id}`
3) 下载结果 `/openApi/search/download/{task_id}`
## 入口脚本
- 主脚本：`scripts/hunter_batch_cli.py`
- 运行方式：
- AI 无交互推荐：
- `python3 scripts/hunter_batch_cli.py --no-interactive --api-key "$HUNTER_API_KEY" --search 'web.title="test"' --check-delay 10 --json-output`
- 兼容交互：
- `python3 scripts/hunter_batch_cli.py`
## 参数说明
- 必填：`api-key`
- 常用可选：`search`、`start_time`、`end_time`、`is_web`、`status_code`、`fields`、`assets_limit`
- AI 友好参数：
- `--no-interactive`：禁止交互输入，缺参即报错
- `--check-delay`：创建任务后等待 N 秒（默认 10）再首次尝试下载
- `--poll-interval` / `--poll-timeout`：轮询控制
- `--output-file`：指定下载文件名
- `--json-output`：最后输出一行 JSON 结果，便于机器解析
## 安全注意事项
- 不要将真实 `api-key` 写入仓库文件。
- 推荐使用环境变量注入：`HUNTER_API_KEY`。
- 若必须持久化，请使用系统密钥环或加密配置文件，不要明文存储。
元数据
常见问题
Hunter Search v1.0 是什么？
用于调用奇安信 Hunter OpenAPI 进行资产批量导出。用户提到 Hunter、资产测绘、批量导出、task_id 下载文件等需求时优先加载本 skill。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 105 次。
如何安装 Hunter Search v1.0？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install hunterserach」即可一键安装，无需额外配置。
Hunter Search v1.0 是免费的吗？
是的，Hunter Search v1.0 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Hunter Search v1.0 支持哪些平台？
Hunter Search v1.0 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Hunter Search v1.0？
由 bigass（@biglizi775）开发并维护，当前版本 v1.0.0。
推荐 Skills