← 返回 Skills 市场

kmong

Name: kmong
Author: mupengi-bot

作者 mupengi-bot · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

420

总下载

当前安装

版本数

在 OpenClaw 中安装

/install kmong

功能描述

Automates Kmong sign-up, identity verification, profile setup, and service registration using OpenClaw browser with SMS and captcha handling.

使用说明 (SKILL.md)

Kmong Automation Skill 🐧

Registration Process (OpenClaw Browser)

1. Sign Up

1. browser open → https://kmong.com
2. Click sign up (ref: sign up link)
3. Select Google login (Google logo button)
4. Select Google account → Click "Continue"
5. Select "Act as Expert"
6. Check agree all → "Sign up complete"

2. Identity Verification (PASS SMS)

1. Click "Mobile phone verification" → Popup tab opens
2. Check popup tab targetId (query tabs)
3. Select carrier radio: click via evaluate
   - document.querySelectorAll('input[type=radio]')[0].click()  // SKT
   - [1] = KT, [2] = LGU+
4. Agree all: document.querySelectorAll('input[type=checkbox]')[0].click()
5. Click "Verify with SMS"
6. Enter name, birthdate(6 digits), 7th digit of SSN, phone number, security characters
7. Read security characters via screenshot
8. "Confirm" → Enter SMS verification code → "Confirm"
9. In main tab, agree to seller terms → "Expert registration complete"

3. Cautions

When checkbox ref doesn't work: Use evaluate with document.querySelectorAll('input[type=checkbox]')[0].click()
Cannot use const/let — Use var or no declaration
Cannot chain multiple statements with semicolon — One statement per evaluate
PASS verification popup is separate tab — Need to check targetId via tabs query
Security characters (captcha): Take screenshot and read as image

4. Profile Setup

1. Change nickname: "Edit" button → Select all text (Meta+a) → Enter new nickname → "Save"
2. Expertise: Click "Select service fields"
3. Introduction: Click "Write introduction"
4. Register service: Click "Register service"

5. Service Registration Tips

Title: Include SEO keywords (e.g., "AI Chatbot Development | Student Council Organization Management Automation")
Price: 3 tiers (Standard/Deluxe/Premium)
Description: 500+ chars, specify concrete deliverables
Category: IT·Programming > Chatbot Development / Task Automation

Account Information

Email: Configure in ~/.secrets/kmong.env
Nickname: Configure in workspace settings
Profile: https://kmong.com/@[your-username]

🐧 Built by 무펭이 — Mupengism ecosystem skill

安全使用建议

This skill contains detailed, low-level instructions to automate account sign-up and SMS/captcha-based identity verification, and it references a local secrets file (~/.secrets/kmong.env) that is not declared in the skill metadata. Before installing: (1) Ask the author to explicitly declare required environment variables/config paths and explain how SMS and captcha reading are performed (local OCR vs external service) and where verification codes/captchas are stored or transmitted. (2) Do not provide real SSN digits or your primary phone number until you verify the implementation and trust the source — use test/ephemeral accounts and numbers. (3) Prefer running this skill in an isolated environment (VM or throwaway agent) to limit exposure of PII. (4) If you need this functionality, require the skill to document how it protects captured PII and to limit autonomous invocation; otherwise complete sensitive steps manually.

功能分析

Type: OpenClaw Skill Name: kmong Version: 1.0.0 The skill is classified as suspicious due to its instructions for handling highly sensitive Personally Identifiable Information (PII) such as name, birthdate, phone number, and the 7th digit of a Social Security Number during identity verification. Additionally, it instructs the agent to access email credentials from `~/.secrets/kmong.env`, a local file, and extensively uses the powerful `evaluate` command for direct DOM manipulation. While these capabilities are presented as necessary for the stated purpose of automating Kmong registration, they introduce significant attack surface and data handling risks, even without explicit instructions for malicious exfiltration or unauthorized actions within the `SKILL.md` file.

能力评估

⚠ Purpose & Capability

The skill claims to automate Kmong sign-up and verification using the OpenClaw browser — that purpose is coherent with a set of browser automation instructions. However, SKILL.md explicitly references a local secrets file (~/.secrets/kmong.env) for account email and workspace settings for nickname, neither of which are declared in the skill metadata (requires.env or required config paths). The presence of that undeclared secret file requirement is disproportionate to the stated metadata.

⚠ Instruction Scope

The runtime instructions direct the agent to perform highly sensitive actions: entering name, birthdate, the 7th digit of an SSN, phone number, receiving and entering SMS verification codes, and taking screenshots of captchas and 'reading' them. These steps involve collecting and handling PII and authentication tokens. The SKILL.md also contains low-level constraints about evaluate() usage and tab targetId handling — reasonable for browser automation — but the instructions give the agent latitude to capture images and OCR/interpret them without describing where OCR/SMS handling occurs or how captured data is stored/transmitted.

✓ Install Mechanism

Instruction-only skill with no install spec or code files. This has lower disk/write risk; nothing is installed by the skill itself. The lack of an install step is consistent with a purely-instruction skill.

⚠ Credentials

Metadata declares no required environment variables or config paths, but SKILL.md instructs the user/agent to read ~/.secrets/kmong.env and workspace settings for account information. The skill also implicitly needs an SMS-receiving capability and an OCR/captcha-reading capability to function, yet provides no declared env variables, endpoints, or dependency requirements for those services. Requesting or handling SSN digits and SMS verification codes is sensitive and should be explicitly declared and justified.

ℹ Persistence & Privilege

always:false (normal) and autonomous invocation is allowed by default. Because the skill handles PII and verification flows, autonomous runs increase risk — an autonomously-invoked agent could attempt many account creations or submit PII without ongoing human oversight. The skill does not request persistent system-wide configuration, nor does it modify other skills per the provided data.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install kmong
安装完成后，直接呼叫该 Skill 的名称或使用 /kmong 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial publish

元数据

Slug kmong

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题

kmong 是什么？

Automates Kmong sign-up, identity verification, profile setup, and service registration using OpenClaw browser with SMS and captcha handling. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 420 次。

如何安装 kmong？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install kmong」即可一键安装，无需额外配置。

kmong 是免费的吗？

是的，kmong 完全免费（开源免费），可自由下载、安装和使用。

kmong 支持哪些平台？

kmong 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 kmong？

由 mupengi-bot（@mupengi-bot）开发并维护，当前版本 v1.0.0。