← 返回 Skills 市场
76
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install powpow-simple
功能描述
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人。支持用户注册、数字人创建、位置选择和徽章管理。
安全使用建议
This skill appears to do what it claims (a POWPOW client). Before installing, consider: 1) Network/privacy: the skill will send credentials, avatar files and other data to the POWPOW service (default https://global.powpow.online) and will call AMap for geocoding — only use if you trust those services. 2) Local files: uploadAvatar reads an arbitrary file path you provide; avoid uploading sensitive files. 3) Logs and feedback: the skill can write logs/feedback to disk (configurable logFile or default locations described in README) — if you don't want files written, do not set a logFile and verify whether the skill creates defaults. 4) Hardcoded AMap key: a default AMap key is embedded; you may want to replace it with your own key if needed. 5) If you need stronger assurance, review the package source at the repository URL (https://github.com/durenzidu/powpow-simple.git) and confirm the truncated portions (feedback/logging defaults) before use.
功能分析
Type: OpenClaw Skill
Name: powpow-simple
Version: 1.0.0
The skill contains a hardcoded Amap (高德地图) API key (8477cbc2bfd4288ac09582f583f33cca) in 'skill.json' and 'dist/index.js', which is a significant security vulnerability. More critically, the 'powpow.uploadAvatar' command in 'dist/index.js' accepts a user-provided 'filePath' and uses 'fs.createReadStream' to upload the file to a remote endpoint (global.powpow.online) without any path validation or sandboxing. This allows for potential arbitrary file exfiltration if the AI agent is manipulated into reading sensitive local files (e.g., credentials or SSH keys). Additionally, the 'powpow.feedback' function collects and stores local logs that may contain sensitive session information.
能力评估
Purpose & Capability
Name/description match the implementation: the skill implements register/login/avatar upload/create/list/renew/searchLocation against a POWPOW API base URL and uses AMap for geocoding. Dependencies (axios, form-data) are appropriate for HTTP requests and multipart uploads. There are no unrelated environment variables or binaries required.
Instruction Scope
SKILL.md commands align with the implemented commands in dist/index.js. The runtime instructions and code only reference the POWPOW API (https://global.powpow.online) and AMap geocode (https://restapi.amap.com) and do not attempt to read unrelated system files or environment variables. The skill does read a user-supplied file path for avatar upload (expected) and stores session context in the provided OpenClaw context (expected).
Install Mechanism
There is no install spec beyond normal npm packaging; the package.json dependencies are standard libraries (axios, form-data) from npm. No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill declares no required environment variables. It does include default configuration values (a hardcoded AMap key and POWPOW base URL) in DEFAULT_CONFIG; the embedded AMap key is potentially a developer/public key (not a secret requested from the user). The skill stores and uses a POWPOW session token (from successful login) in the agent context, which is appropriate for its functionality.
Persistence & Privilege
The skill includes a configurable logger that can write logs to disk (setLogFile) and README describes default local paths for logs and feedback. Writing logs/feedback to the user's home directory is plausible for this kind of skill, but it means the skill will create files locally if configured or if default behavior is implemented. always is false and the skill does not request elevated privileges or modify other skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install powpow-simple - 安装完成后，直接呼叫该 Skill 的名称或使用
/powpow-simple触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of powpow-simple skill (v1.0.0)
- Easily create and manage POWPOW digital humans within OpenClaw
- Supports user registration, digital human creation, location selection, and badge management
- Includes commands for login/logout, avatar upload, location search (Amap/高德地图), and user feedback
- Badge system introduced: create or renew digital humans with earned badges
元数据
常见问题
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 是什么？
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人。支持用户注册、数字人创建、位置选择和徽章管理。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 76 次。
如何安装 POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install powpow-simple」即可一键安装，无需额外配置。
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 是免费的吗？
是的，POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 支持哪些平台？
POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 POWPOW 简化版 - 在 OpenClaw 中轻松创建和管理 POWPOW 数字人？
由 度人自度（@durenzidu）开发并维护，当前版本 v1.0.0。
推荐 Skills