← 返回 Skills 市场
raaipro

Content Master Pro

作者 RAAIPRO · GitHub ↗ · v3.5.5 · MIT-0
cross-platform ⚠ suspicious
161
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install raai-content-master-pro
功能描述
Full-cycle content marketing system for Russian-speaking businesses: strategy, production, funnel logic, email, analytics. Not an autoposter. First builds th...
安全使用建议
Do not run install.sh or smoke-test.sh until you (or someone you trust) have inspected their contents. The biggest red flags are inconsistencies: the registry lists no required env vars, but SKILL.md enumerates many API keys (Anthropic/OpenAI, Telegram, Google Sheets, GetResponse, UniSender). Confirm which integrations you actually need and only supply those credentials. Ask the publisher for a homepage or source repository (author identity is unclear). If you want to proceed, run the package in an isolated environment (VM or container) or review the install/test scripts line-by-line. Share the contents of install.sh and test/smoke-test.sh if you want a deeper review — that will materially reduce uncertainty.
功能分析
Type: OpenClaw Skill Name: raai-content-master-pro Version: 3.5.5 The bundle is a comprehensive content marketing framework designed for an AI agent. It consists primarily of extensive markdown instructions (SKILL.md) and configuration templates (config.yaml) that guide the agent in generating marketing strategies, SEO plans, and social media content. The included shell scripts (install.sh, build.sh, and test/smoke-test.sh) are standard utility scripts for local installation, packaging, and validation; they do not perform any network requests, download remote payloads, or attempt privilege escalation. While the skill requests environment variables for various APIs (Telegram, Google Sheets, etc.), these are consistent with its stated integration features, and there is no evidence of malicious intent, data exfiltration, or harmful prompt injection.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The public registry metadata lists no required environment variables or credentials, but SKILL.md declares many API-related env names (ANTHROPIC_API_KEY, OPENAI_API_KEY, TELEGRAM_BOT_TOKEN, GOOGLE_SHEETS_CREDENTIALS_JSON, GETRESPONSE_API_KEY, UNISENDER_API_KEY). Those credentials are not obviously required for a purely offline content-generator (the README explicitly says 'not an autoposter'), so the set of declared env vars feels disproportionate or at least inconsistent with the stated purpose.
Instruction Scope
SKILL.md instructs users to run install.sh and test/smoke-test.sh (README quick-start). SKILL.md metadata claims network_behavior: makes_requests: false and uses_agent_telegram: false while simultaneously listing many network-facing credentials. This is an internal inconsistency: either the skill integrates with external services (requiring network and keys) or it doesn't — the instructions and metadata disagree. The skill asks users to populate config.yaml and may read/write local config (expected), but the docs also include claims about scraping competitors and integrating with external services, which could imply network activity not reflected in the metadata.
Install Mechanism
There is no platform install spec (no automatic download), which lowers automatic risk. However the package includes install.sh, build.sh and a smoke-test script and README instructs running install.sh. Those scripts run locally and could perform arbitrary filesystem actions; their presence is a moderate operational risk unless you inspect their contents before executing. The provided build.sh appears to only assemble a ZIP from local files and run a local smoke-test; no external downloads in build.sh itself.
Credentials
SKILL.md lists multiple sensitive environment variables (API keys and tokens) that give broad external access (Anthropic/OpenAI for model calls, TELEGRAM_* for messaging, Google Sheets credentials, GetResponse/UniSender for email). The top-level registry metadata indicated 'none' required; that mismatch is suspicious. Requesting many unrelated credentials increases blast radius and should be justified by explicit documented integrations — which are not consistently documented in SKILL.md (it repeatedly says 'not autoposter' yet includes posting-related tokens).
Persistence & Privilege
The skill does not request 'always: true' and is user-invocable only. Nothing in the manifest indicates it will forcibly persist or auto-enable itself in every agent session. That said, the included install.sh copies files into ~/.openclaw/skills/ if you run it, which is normal for installing a skill but is an action you should permit only after code review.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install raai-content-master-pro
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /raai-content-master-pro 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.5.5
Marketplace presentation refresh.
v3.5.4
Marketplace presentation refresh.
v3.5.3
v3.5.3 clean repair: package metadata and changelog wording cleaned for public catalog.
v3.5.2
v3.5.2 repair: removed sold/internal domain refs, removed stale v3.3 labels, removed internal config file.
v3.5.1
v3.5.1: proof cases, competitor materials, onepager, publish-ready packaging.
元数据
Slug raai-content-master-pro
版本 3.5.5
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 5
常见问题

Content Master Pro 是什么?

Full-cycle content marketing system for Russian-speaking businesses: strategy, production, funnel logic, email, analytics. Not an autoposter. First builds th... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 161 次。

如何安装 Content Master Pro?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install raai-content-master-pro」即可一键安装,无需额外配置。

Content Master Pro 是免费的吗?

是的,Content Master Pro 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Content Master Pro 支持哪些平台?

Content Master Pro 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Content Master Pro?

由 RAAIPRO(@raaipro)开发并维护,当前版本 v3.5.5。

💬 留言讨论