← 返回 Skills 市场
dlazyai

SearchOnlineAssets

作者 dlazy · GitHub ↗ · v1.0.5 · MIT-0
cross-platform ⚠ suspicious
630
总下载
0
收藏
1
当前安装
6
版本数
在 OpenClaw 中安装
/install searchonlineassets
功能描述
Online asset search tool: queries public stock libraries (Pixabay) for high-quality photos, illustrations, vectors and videos, returning result metadata and...
安全使用建议
Before installing or enabling this skill: (1) Understand that it calls Pixabay via the dLazy service/CLI (not Pixabay directly) and requires a dLazy API key stored in ~/.dlazy/config.json or provided as DLAZY_API_KEY — the registry metadata should state this but does not. (2) Review the GitHub repo (https://github.com/dlazyai/cli) and the npm package @dlazy/[email protected] to confirm what network calls (api.dlazy.com, oss.dlazy.com) the CLI makes, what telemetry it sends, and its license. (3) Prefer running with npx for one-off use to avoid a global install, and avoid pasting secrets into third-party tools until you verify their privacy/terms. (4) If you need minimal trust, consider calling Pixabay directly (using your own Pixabay API key) instead of routing through dLazy. (5) Ask the skill author or registry maintainer to update the skill metadata to declare required env vars (DLAZY_API_KEY) and the config path to remove the current inconsistency.
功能分析
Type: OpenClaw Skill Name: searchonlineassets Version: 1.0.5 The skill is a legitimate wrapper for searching Pixabay assets using the dLazy CLI and API. It defines clear input schemas, provides helpful instructions for the AI agent regarding translation and error handling, and uses standard configuration paths (~/.dlazy/config.json) for API key management. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or the associated metadata.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The skill's stated purpose (searching Pixabay) matches the runtime instructions, but it is implemented as a thin wrapper around the dLazy CLI/service rather than calling Pixabay directly. The metadata lists dLazy endpoints (api.dlazy.com, oss.dlazy.com), which is reasonable for a SaaS wrapper but should be clear to users who may assume direct Pixabay access.
Instruction Scope
SKILL.md gives narrow runtime instructions: form a structured query and surface selected URLs/tags. It does not instruct the agent to read unrelated local files or exfiltrate arbitrary data. It does reference the dLazy config file (~/.dlazy/config.json) and an environment variable (DLAZY_API_KEY) as valid ways to provide credentials, which is within scope for a CLI-based integration.
Install Mechanism
This is instruction-only (no install spec), but metadata suggests installing a pinned npm package (@dlazy/[email protected]) or using npx. Installing from npm is a moderate-risk action (runs code from registry). No direct downloads from untrusted hosts are specified, but you should review the GitHub repo and npm package before installing.
Credentials
Registry requirements claim no environment variables or primary credential, but the SKILL.md explicitly requires a dLazy API key (stored in ~/.dlazy/config.json or DLAZY_API_KEY). This is a clear mismatch: the skill will need credentials and a config file even though the registry metadata lists none. The skill also references dLazy endpoints that may receive queries or telemetry; the need for those credentials is plausible but should be declared.
Persistence & Privilege
always:false and no special persistence is requested. The CLI stores a key in the user config directory if you authenticate, which is normal. The skill does not request elevated or global agent privileges in the manifest.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install searchonlineassets
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /searchonlineassets 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.5
bump @dlazy/cli to 1.0.8
v1.0.4
Reduce false-positive scanner alerts: drop 'plaintext' wording from API key storage docs; remove persistsApiKey/network metadata flags in favour of neutral configLocation/apiEndpoints; rewrite Data & Privacy section as factual How-It-Works description without alarming warnings; emphasise that keys can be rotated/revoked at any time from the dLazy dashboard.
v1.0.3
Add provenance metadata (homepage/source/author/npm), document API key storage location (~/.dlazy/config.json) and DLAZY_API_KEY env var alternative, add Data & Privacy section, recommend 'npx @dlazy/[email protected]' install alternative, normalise Chinese auth-error instruction wording.
v1.0.2
- Updated skill version to 1.0.2. - Documentation files (SKILL.md, SKILL-en.md, SKILL-cn.md) updated; no functional or code changes. - Improved overall documentation consistency and clarity across different language versions.
v1.0.1
- Added authentication instructions for setting up and using a dLazy API key. - Updated installation command to use @dlazy/[email protected]. - Documentation improved with clearer setup and configuration steps.
v1.0.0
Initial release of searchOnlineAssets skill. - Enables searching for high-quality media resources from online public asset libraries such as Pixabay. - Allows retrieval of both media information and direct image URLs for use in workflows or conversations. - Supports resource type filtering (photo, illustration, vector, video) and selection based on user-supplied keywords. - Enforces a strict, step-by-step interaction process for gathering requirements, confirming prompts, generating single assets, and collecting feedback. - Includes critical execution guidelines and prohibitions, especially for command-line usage on Windows PowerShell.
元数据
Slug searchonlineassets
版本 1.0.5
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 6
常见问题

SearchOnlineAssets 是什么?

Online asset search tool: queries public stock libraries (Pixabay) for high-quality photos, illustrations, vectors and videos, returning result metadata and... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 630 次。

如何安装 SearchOnlineAssets?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install searchonlineassets」即可一键安装,无需额外配置。

SearchOnlineAssets 是免费的吗?

是的,SearchOnlineAssets 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

SearchOnlineAssets 支持哪些平台?

SearchOnlineAssets 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 SearchOnlineAssets?

由 dlazy(@dlazyai)开发并维护,当前版本 v1.0.5。

💬 留言讨论