← 返回 Skills 市场
dthinkr

Openclaw Skill

作者 venvox · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
121
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install prose-kit
功能描述
AI写作流水线:给一个主题,出9篇风格迥异的中文散文,自动评分排名。
安全使用建议
This skill will call prose-kit.com, ask for your email to register (if you don't already have a key), require you to set PROSE_KIT_API_KEY, and save generated essays to prose-kit-output/ on your machine. Before installing: (1) verify the prose-kit.com domain and service legitimacy (homepage/source code are missing from the registry entry), (2) do not share sensitive credentials—only provide an API key if you trust the service, (3) be aware your email will be sent to a third party during registration, and (4) confirm you are comfortable with the skill writing files locally. The metadata omission (no declared required env var) could be a sloppy authoring error, but it reduces trust—ask the publisher for source or a homepage or prefer skills with clear provenance.
功能分析
Type: OpenClaw Skill Name: prose-kit Version: 1.1.0 The prose-kit skill is classified as suspicious due to multiple command and Python injection vulnerabilities in SKILL.md. The instructions generate shell commands and Python scripts by directly interpolating user-provided topics and API-returned task IDs without sanitization, which could allow for arbitrary code execution. Furthermore, the skill's registration process requires sending user email addresses to an external domain (prose-kit.com), and the use of raw Python execution for polling introduces significant risk if the external service is compromised.
能力评估
Purpose & Capability
The skill's stated purpose (generate 9 Chinese essays + scoring) matches the runtime actions (POST /generate, poll /tasks, optional /usage). However, the registry metadata lists no required env vars while SKILL.md explicitly requires PROSE_KIT_API_KEY and instructs registration at prose-kit.com—this metadata mismatch is unexplained and reduces trust in provenance.
Instruction Scope
Instructions are scoped to the prose-kit API: obtain/require an API key (or register with the user's email), POST a generate request, poll a tasks endpoint, save resulting essays to prose-kit-output/, and optionally query usage. These steps are coherent with the feature but include sending the user's email to a third-party and writing user data to disk, which are privacy-relevant actions the user should consent to.
Install Mechanism
Instruction-only skill with no install spec or downloaded code. No on-disk installs are performed by the skill definition itself, which is lower risk.
Credentials
SKILL.md requires PROSE_KIT_API_KEY (and accesses it in the polling script) but the registry metadata claims no required env vars; this omission is inconsistent. Requiring a single API key and the user's email is proportionate to the described service, but the missing declaration and lack of provenance (no homepage/source) are suspicious.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or cross-skill config changes. It writes output files to a local directory (prose-kit-output/), which is expected behavior for saving generated essays.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install prose-kit
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /prose-kit 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
Save essays to local files, only show summary table in context
v1.0.2
Add payment link for Pro upgrade
v1.0.1
Use prose-kit.com custom domain
v1.0.0
Prose Kit 1.0.0 — 首发上线 - 支持输入主题,批量生成 9 篇不同学科视角的中文散文 - 自动检测和注册 API Key,注册后引导用户配置 - 支持免费与 Pro 收费两种模式,Pro 用户可选高阶模型与自动评分 - 散文自动保存为 Markdown 文件,带 frontmatter,可直接使用 - 提供散文生成、进度轮询、评分展示、用量查询等完整流程 - 明确功能调用方式、价格与日用量限制
元数据
Slug prose-kit
版本 1.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Openclaw Skill 是什么?

AI写作流水线:给一个主题,出9篇风格迥异的中文散文,自动评分排名。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 121 次。

如何安装 Openclaw Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install prose-kit」即可一键安装,无需额外配置。

Openclaw Skill 是免费的吗?

是的,Openclaw Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Openclaw Skill 支持哪些平台?

Openclaw Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Openclaw Skill?

由 venvox(@dthinkr)开发并维护,当前版本 v1.1.0。

💬 留言讨论