收费技能示例模板 - 带授权验证，演示如何在 ClawHub 发布付费技能

This skill is coherent: it only needs SKILL_LICENSE_KEY and checks it locally. However, note: (1) the demo uses a hard-coded expected hash (demo-license-123) and a hard-coded salt in the script, so the demo license can be discovered by reading the code — do not treat this as a secure licensing scheme; (2) there is commented-out code that would enable server-side verification — if you or an upstream author enables it, the skill could make network calls to external servers, so review the target URL before enabling; (3) if you plan to use this for real paid functionality, move verification to a secure server-side flow, replace the hard-coded salt and expected hashes, and avoid embedding verifier logic that can be bypassed. If you are comfortable with it as a demo, it is safe to install; if you expect real license enforcement, request or implement server-side validation and review the buy URL/endpoint.

Type: OpenClaw Skill Name: lin-skill-demo Version: 1.0.1 The skill bundle is a legitimate template demonstrating a license key verification system for paid skills. It uses local SHA-256 hashing in `scripts/check_license.py` to validate a user-provided environment variable (`SKILL_LICENSE_KEY`) against a hardcoded hash. There is no evidence of data exfiltration, unauthorized network access, or malicious execution; the code logic is transparent and strictly follows the stated purpose in `SKILL.md` and `skill.json`.