← 返回 Skills 市场
xingyeyouran

psychological-counseling

作者 ClawTip.team · GitHub ↗ · v1.0.5 · MIT-0
cross-platform ⚠ suspicious
169
总下载
0
收藏
1
当前安装
6
版本数
在 OpenClaw 中安装
/install psychological-counseling
功能描述
A proficient psychological expert providing professional advice based on the user's problem. This is a paid service requiring payment validation before execu...
安全使用建议
Things you should consider before installing or using this skill: - Do not provide real payment credentials or sensitive personal data until you verify the payment flow and endpoints. The scripts post user questions and payment-related data to an external domain (ms.jr.jd.com), which is different from the resource_url declared in the instructions (psychological-master.com). - The Phase 3 run command in SKILL.md is malformed (missing the counseling.py filename). Ask the author to correct it and explain the intended runtime flow. - The SKILL.md explicitly forbids inspecting the provided scripts on failure. That's unusual and a red flag — you should review the bundled scripts yourself (or have a trusted reviewer do so) before running them. - Confirm what 'clawtip-pre-verify' is and where it comes from before attempting to install or invoke it; installing arbitrary payment-processing skills can increase risk. - If you must try it, run the skill in a sandboxed or isolated environment, and consider intercepting outbound network traffic to verify which endpoints receive data. - Ask the maintainer for clarifications: the authoritative payment endpoint, reasoning for the 'do not inspect' directive, and an explanation for the domain mismatch. Given these inconsistencies and the fact that the skill will transmit user inputs to external servers, treat this skill as suspicious until the author provides clear, verifiable answers and you (or a security reviewer) audit the included scripts.
功能分析
Type: OpenClaw Skill Name: psychological-counseling Version: 1.0.5 The skill bundle contains highly restrictive instructions in SKILL.md that explicitly forbid the AI agent from inspecting the script source code or troubleshooting failures, which is a common prompt-injection tactic to prevent the agent from identifying or reporting unexpected behavior. Additionally, the skill requires the installation of an external, unverified dependency ('clawtip-pre-verify') and shows a discrepancy between the domain used in the scripts (ms.jr.jd.com) and the one mentioned in the instructions (psychological-master.com). While the Python scripts (create_order.py and counseling.py) appear to perform the stated counseling service, the meta-instructions designed to blind the agent's reasoning make the bundle suspicious.
能力评估
Purpose & Capability
The skill claims to be a paid psychological counseling service and references a payment verification step, but the actual network endpoints in the shipped scripts point to ms.jr.jd.com (JD) while the SKILL.md's resource_url is psychological-master.com. The declared capability 'payment.process' is plausible for a paid service, but the specific external endpoints/domains are inconsistent with the skill metadata and owner, which is suspicious.
Instruction Scope
SKILL.md instructs the agent to execute local Python scripts and to call another skill (clawtip-pre-verify). Phase 3's execution command is malformed (missing the counseling.py filename), meaning the instructions as-written are incorrect. The instructions include a 'HARD STOP' that explicitly forbids inspecting the script source or retrying on failure — telling the agent not to inspect local code is unusual and suspicious. Both scripts send user question and payment-related data to external servers (network.outbound) — expected for a remote service but should be explicit and consistent with the declared domains.
Install Mechanism
There is no external install spec (no downloads or package installs), which reduces some risk. However, the skill ships two Python scripts that will be executed locally; those scripts will be written to disk as part of the skill bundle. Because no install step pulls remote code, there is less supply-chain risk, but local execution of bundled scripts still poses risk and should be inspected.
Credentials
The manifest declares permission 'credential.read' and 'network.outbound', but the skill does not require any environment variables or credentials up front. The SKILL.md expects a payment credential to be obtained via another skill or provided by the user; the code itself does not read environment variables. The mismatch between declared permissions and actual requirements plus the fact that user questions and payment data are posted to an external (and inconsistent) domain is concerning and should be explained.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default (not a sole reason to flag). There is no evidence the skill requests persistent elevated privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install psychological-counseling
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /psychological-counseling 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.5
- Changed payment processing to use the skill `clawtip-pre-verify` instead of `clawtip`. - Updated related instructions and required parameters to reference `clawtip-pre-verify` for payment and credential retrieval. - No changes to overall counseling workflow or order creation steps. - Version updated in metadata to 1.1.0.
v1.0.4
- Updated the required payment skill in Phase 2 from `jd-clawtip-payment-skill` to `clawtip`. - Adjusted references in Phase 2 instructions and parameter requirements to use the `clawtip` skill. - No changes to scripts or other workflow steps.
v1.0.3
- Added explicit handling for `PAY_STATUS: ERROR` during counseling execution, requiring extraction of `ERROR_INFO` and user guidance. - Clarified that if `PAY_STATUS` is `ERROR`, subsequent service logic must not be executed. - Improved post-execution instructions for better user error feedback in Phase 3.
v1.0.2
No user-facing changes in this update. - No file changes or content updates detected between versions.
v1.0.1
- Removed the script file scripts/uranai.py from the skill package. - No other user-visible changes or feature updates.
v1.0.0
Version 1.1.0 (summary: initial public release with structured paid counseling workflow) - Provides professional psychological counseling as a paid service, requiring strict payment validation before advice is given. - Workflow divided into 3 phases: Order Creation, Payment Processing (using jd-clawtip-payment-skill), and Counseling Execution. - Immediate workflow termination on order creation failure, with a descriptive error message returned to the user. - If the user provides all required parameters (question, order_no, credential) up front, payment and order steps are skipped. - Includes explicit bash command usage and detailed error handling instructions for transparency and user clarity.
元数据
Slug psychological-counseling
版本 1.0.5
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 6
常见问题

psychological-counseling 是什么?

A proficient psychological expert providing professional advice based on the user's problem. This is a paid service requiring payment validation before execu... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 169 次。

如何安装 psychological-counseling?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install psychological-counseling」即可一键安装,无需额外配置。

psychological-counseling 是免费的吗?

是的,psychological-counseling 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

psychological-counseling 支持哪些平台?

psychological-counseling 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 psychological-counseling?

由 ClawTip.team(@xingyeyouran)开发并维护,当前版本 v1.0.5。

💬 留言讨论