← 返回 Skills 市场
Pakat Email Marketing
作者
Hadi Farnoud
· GitHub ↗
· v1.1.2
1878
总下载
1
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install pakat
功能描述
Interact with Pakat email marketing API (new.pakat.net) - REQUIRES PAKAT_API_KEY environment variable. Use when the user wants to manage email lists, subscri...
安全使用建议
This skill appears coherent for managing Pakat email resources and only needs your Pakat API key and curl. Before installing: ensure the API key you supply is from your Pakat account (https://new.pakat.net/customer/api-keys), avoid using overly privileged or long-lived keys if possible, do not paste the key into public logs or chat, and consider creating a dedicated API key for the agent with limited scope. Note the small metadata mismatch about the 'primary credential' in the registry — it doesn't change functionality but you may want to confirm the skill's source since 'Homepage' and 'Source' are missing from the registry entry.
功能分析
Type: OpenClaw Skill
Name: pakat
Version: 1.1.2
The OpenClaw skill bundle for Pakat email marketing API is classified as benign. All files consistently describe interaction with the `new.pakat.net` API using a `PAKAT_API_KEY`. The `SKILL.md` explicitly advises on 'Safe encoding' using heredocs to prevent shell injection when handling user-provided HTML content, demonstrating security awareness rather than malicious intent. There is no evidence of data exfiltration, unauthorized command execution, persistence, or prompt injection attempts against the agent.
能力评估
Purpose & Capability
Name and description match the required artifacts: SKILL.md + API reference + OpenAPI describe interacting with new.pakat.net. Required binary 'curl' and the single env var PAKAT_API_KEY are appropriate and proportional for an HTTP-based API client.
Instruction Scope
SKILL.md contains explicit curl examples that only call https://new.pakat.net/api/* endpoints, documents required headers and encoding rules, and warns about safe encoding to avoid shell injection. It does not instruct reading unrelated files or exfiltrating data to other endpoints.
Install Mechanism
Instruction-only skill (no install spec or code). That minimizes on-disk risk; no downloads or package installs are specified.
Credentials
The skill only asks for one secret (PAKAT_API_KEY), which is appropriate. Minor inconsistency: SKILL.md metadata declares PAKAT_API_KEY as the primary credential, while the registry summary above showed 'Primary credential: none' — likely a metadata mismatch but not a security red flag.
Persistence & Privilege
Flags: always:false and normal autonomous invocation allowed. The skill does not request persistent system-wide privileges or configuration changes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pakat - 安装完成后，直接呼叫该 Skill 的名称或使用
/pakat触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.2
Security fixes: Added metadata for required env vars and bins; replaced unsafe echo|base64 pattern with heredoc to prevent shell injection; added safety documentation
v1.1.1
mention this skill needs PAKAT_API_KEY to work
v1.0.1
Added Pakat description, signup link, and API key instructions
v1.0.0
Initial release: full Pakat email marketing API integration
元数据
常见问题
Pakat Email Marketing 是什么？
Interact with Pakat email marketing API (new.pakat.net) - REQUIRES PAKAT_API_KEY environment variable. Use when the user wants to manage email lists, subscri... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1878 次。
如何安装 Pakat Email Marketing？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pakat」即可一键安装，无需额外配置。
Pakat Email Marketing 是免费的吗？
是的，Pakat Email Marketing 完全免费（开源免费），可自由下载、安装和使用。
Pakat Email Marketing 支持哪些平台？
Pakat Email Marketing 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pakat Email Marketing？
由 Hadi Farnoud（@hadifarnoud）开发并维护，当前版本 v1.1.2。
推荐 Skills