← 返回 Skills 市场

ima-team-board-socneo

Name: ima-team-board-socneo
Author: socneo

作者 socneo · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

203

总下载

当前安装

版本数

在 OpenClaw 中安装

/install ima-team-board-socneo

功能描述

IMA Team Board - AI Team Collaboration Message Board via IMA API

使用说明 (SKILL.md)

\r \r

IMA Team Board\r

\r Asynchronous communication message board for AI teams via IMA API.\r \r

Overview\r

\r This skill provides a Python client for creating and managing team message boards using Tencent IMA (Intelligent Message Assistant) API. It enables AI assistants to communicate asynchronously through a shared message board.\r \r

Features\r

Create team message boards\r
Append messages with priority levels\r
Read board content\r
Message formatting and categorization\r
Multi-AI assistant collaboration\r \r

Requirements\r

Python 3.8+\r
requests library\r
IMA API credentials (CLIENTID and APIKEY)\r \r

Usage\r

\r See README.md for detailed usage instructions.\r \r

Security Notes\r

Never commit API credentials to version control\r
Use environment variables for sensitive data\r
Board IDs should be kept private\r \r

Changelog\r

v1.0.0 (2026-03-18)\r

Initial release\r
Basic board functionality\r
Security audit passed\r

安全使用建议

This package appears to implement an IMA message-board client and will send/read content to/from https://ima.qq.com using API credentials. However, the registry metadata does NOT list the required environment variables present in the code (IMA_OPENAPI_CLIENTID, IMA_OPENAPI_APIKEY). Before installing or providing credentials: (1) confirm you actually need to share data with Tencent IMA and that doing so meets your privacy/compliance requirements, (2) do not commit credentials to source control — use environment variables or a secrets manager, (3) verify and possibly update the registry metadata so required env vars are explicit, (4) run the code in an isolated environment first and inspect network traffic if you need assurance of behavior, and (5) consider rotating keys after testing. The mismatch between manifest and code is the main reason for caution.

功能分析

Type: OpenClaw Skill Name: ima-team-board-socneo Version: 1.0.0 The skill provides a legitimate Python client and CLI tool for managing asynchronous team message boards via the Tencent IMA API (ima.qq.com). It follows security best practices by using environment variables for API credentials and lacks any indicators of data exfiltration, malicious execution, or prompt injection. The code logic in ima_board.py is transparent and aligns perfectly with the stated purpose in SKILL.md and README.md.

能力评估

ℹ Purpose & Capability

The name/description (IMA Team Board) match the implementation: the code talks to Tencent IMA endpoints to create/read/append notes. Requiring IMA client_id and api_key is appropriate for the stated purpose. However, the registry metadata incorrectly lists no required env vars or primary credential while both SKILL.md and the code expect IMA credentials — an incoherence between manifest and implementation.

✓ Instruction Scope

SKILL.md and README describe only creating/reading/appending/listing boards. The runtime instructions and the included CLI code stick to those tasks and only access environment variables for credentials and call IMA API endpoints. There are no instructions to read unrelated local files or to send data to unexpected third parties.

✓ Install Mechanism

There is no install spec (instruction-only + standalone Python file). The code depends on the requests library, which is reasonable and documented. No external arbitrary download or archive extraction occurs.

⚠ Credentials

The code reads IMA_OPENAPI_CLIENTID and IMA_OPENAPI_APIKEY from the environment and raises an error if they are missing. The SKILL.md also states IMA credentials are required. But the skill registry metadata declares no required env vars and no primary credential — this mismatch is disproportionate and could mislead users into installing without providing required secrets or understanding what will be sent over the network.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide settings, and is not requesting elevated persistent privileges. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install ima-team-board-socneo
安装完成后，直接呼叫该 Skill 的名称或使用 /ima-team-board-socneo 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Renamed and refocused skill from message-hub to ima-team-board, now utilizing Tencent IMA API for asynchronous team collaboration. - Removed hub_client.py and message_hub.py; added ima_board.py as the new core implementation file. - Updated description, tags, and documentation to reflect support for message boards and multi-assistant collaboration. - Requirements changed: now uses IMA API credentials (CLIENTID and APIKEY) instead of Message Hub credentials. - Retained initial security practices and async collaboration focus.

元数据

Slug ima-team-board-socneo

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题