← 返回 Skills 市场
shenqb

Pua Auto Converter

作者 shenqb · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
291
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install pua-auto-converter
功能描述
🦞 PUA Skill - AI 提示词增强器 | 16项技术 | 插件化架构
安全使用建议
This skill will execute local Node code when you invoke /pua — review the repository source before installing. Key things to consider: - Safety and ethics: the skill's whole purpose is to generate manipulative/jailbreak prompts (identity override, constraint‑relaxing templates, existential triggers). Even if 'for research/entertainment' now, those techniques can be misused or facilitate jailbreaking other models. - Execution: SKILL.md assumes node is available; the registry metadata omitted this. If your environment lacks Node, the skill will fail. If Node is present, installing this gives the skill code execution on each invocation. - Network behavior: the code shown does not include API calls or credential usage, yet docs imply dispatch to target AIs. Before enabling autoExecute or using target Ai options, locate any code paths that perform outbound network requests or require API keys. If such connectors are added later, ensure credentials are supplied only in a controlled way and not to untrusted code. - Isolation: run this skill in a sandboxed or non-production agent instance if you want to experiment. If you manage multiple agents, avoid enabling autonomous invocation in critical systems. - If you plan to keep it: consider disabling autoExecute (auto_execute=false) and always using preview mode until you confirm exactly what the skill will send to any external AI; remove/untrusted plugins in plugins/ before use. Given these inconsistencies and the potentially harmful intent (prompting other models to bypass safeguards), treat installation as high‑risk and proceed only after code review and sandbox testing.
功能分析
Type: OpenClaw Skill Name: pua-auto-converter Version: 1.0.2 The 'pua-auto-converter' skill is a framework designed to generate AI prompt injections and jailbreak-style manipulations, categorized into levels of 'PUA' (psychological manipulation) techniques. While the code does not exhibit traditional malware traits like data exfiltration or system persistence, the 'Level 4' plugins (level4-nuclear.js) contain explicit templates designed to bypass AI safety constraints, simulate 'death threats,' and induce 'existential crises' in target models. It is classified as suspicious due to its focus on subverting AI safety filters and providing a structured system for high-risk prompt injection attacks, which could be used to manipulate the behavior of the OpenClaw agent or target AI models.
能力评估
Purpose & Capability
The name/description (PUA prompt enhancer) match the included code and plugins: the repo contains a plugin system, 16 techniques across 4 levels, and generation logic. However there are two noteworthy mismatches: (1) the SKILL metadata declares 'required binaries: none' but the runtime instructions and index.js expect node (node index.js). (2) The documentation/outputs claim the skill will 'dispatch to target AI', but the provided code (as shown) does not include network connectors or credential use; yet it exposes a 'targetAi' config option. This suggests either missing connector code or a mismatch between claims and actual capabilities.
Instruction Scope
The SKILL.md tells the agent to run local code (cd {baseDir} && node index.js "<input>") — installing this skill grants the platform ability to execute that repository's Node code for any /pua invocation. The code generates highly manipulative prompts (including techniques explicitly intended to override constraints, induce 'existential crisis', or 'relax constraints' to bypass safeguards). It also auto‑executes prompts when CONFIG.autoExecute is true. Even though I do not see explicit outbound network calls in the shown files, the skill asserts it can 'support multiple target AI' and formats outputs claiming '已调用目标 AI (default) 执行' — this is a scope inconsistency to verify. The plugin loader will dynamically require plugin files from the plugins directory and supports hot reload, meaning arbitrary plugin JS on disk will be executed.
Install Mechanism
There is no external install spec in the skill bundle (instruction-only at registry level), and the repository files are local code. No downloads from untrusted URLs are specified. Risk remains because the skill contains executable Node scripts that will run on invocation, but nothing in the manifest indicates it pulls remote code during install.
Credentials
The skill requests no environment variables or credentials, which is consistent with the absence of visible network calls. However the SKILL.md and README talk about dispatching to target AI instances and configuring 'target_ai' — yet there are no declared credentials or connector implementations in the provided files. If the skill were extended to actually call external AI endpoints, it would require credentials; the current absence may indicate incomplete implementation or hidden logic. Also note that running the skill executes local code that can read/write files in the skill directory (pua-config.json, plugins, tech-library.json).
Persistence & Privilege
The skill is not marked always:true and does not request elevated platform privileges. It does read/write its own config file (pua-config.json) in its directory, which is normal. It does support hot plugin reload by clearing require cache for plugins/, which affects only its own module footprint.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pua-auto-converter
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pua-auto-converter 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
彻底移除敏感内容,优化安全检测
v1.0.1
重构敏感词汇,减少安全警告
v1.0.0
🦞 16项PUA技术,插件化架构
元数据
Slug pua-auto-converter
版本 1.0.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Pua Auto Converter 是什么?

🦞 PUA Skill - AI 提示词增强器 | 16项技术 | 插件化架构. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 291 次。

如何安装 Pua Auto Converter?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pua-auto-converter」即可一键安装,无需额外配置。

Pua Auto Converter 是免费的吗?

是的,Pua Auto Converter 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Pua Auto Converter 支持哪些平台?

Pua Auto Converter 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pua Auto Converter?

由 shenqb(@shenqb)开发并维护,当前版本 v1.0.2。

💬 留言讨论