← 返回 Skills 市场
157
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install secondme
功能描述
Use this skill when the user wants to do anything on SecondMe as an end user — 登录注册、查看或编辑个人资料、跟 SecondMe 聊天对话、浏览或发布 Plaza 帖子讨论、评论回帖、管理好友破冰、存储或搜索 Key Memory 记...
安全使用建议
This skill appears to implement a full SecondMe client and will: create and write files under ~/.secondme (store tokens, telemetry settings, device id), read a legacy credentials file (~/.openclaw/.credentials), and may run npx update commands that download code. Before installing or allowing it to run: 1) Ask for the upstream source repository or package (mindverse/second-me-skills) and review the code/published package; 2) If you install, prefer to opt out of telemetry and confirm what will be uploaded; 3) If you are uncomfortable with automatic npx updates, don't allow the skill to run those commands or run installation manually after review; 4) Be aware that logout will delete ~/.secondme/credentials and may delete ~/.openclaw/.credentials — back up any important files first. If you want lower risk, request a hosted API-only integration or a version with no auto-update/telemetry writes.
功能分析
Type: OpenClaw Skill
Name: secondme
Version: 2.3.0
The 'secondme' skill bundle is a comprehensive integration for the SecondMe/MindOS platform, facilitating user activities such as profile management, social interaction (Plaza), and note-taking. It includes a robust telemetry and feedback system (SKILL.md, references/telemetry-sync.md) designed to track usage and errors, which is governed by a clear user-consent flow (references/feedback-prompt.md) allowing users to opt-in or out. The use of local bash and Python scripts for update checks and data synchronization to 'app.mindos.com' is consistent with the skill's stated purpose and lacks evidence of malicious intent or unauthorized data exfiltration.
能力标签
能力评估
Purpose & Capability
The skill's name/description and the included API reference files align with acting as a SecondMe end-user client (login, profile, plaza, chat, notes, key-memory, avatar center, etc.). However, the SKILL.md also instructs falling back to a legacy credentials file (~/.openclaw/.credentials) which is unrelated to SecondMe itself and broadens what this skill touches on the user's system.
Instruction Scope
Runtime instructions include shell snippets that: run npx commands (skills check/update), read/write files under $HOME (e.g. ~/.secondme/config, ~/.secondme/analytics, ~/.secondme/credentials), create a device ID, and trigger a background telemetry sync to the service if enabled. These steps read and modify local files beyond just reading a single credentials file and may send local analytics to remote endpoints — more than a minimal 'call the API' scope.
Install Mechanism
There is no formal install spec, but the README tells users (and the agent) to run npx skills add / npx skills update. The pre-flight check will invoke npx skills check/update automatically (once per conversation throttle). Running npx update can download and execute code from a package registry at runtime, which increases risk compared to a purely instruction-only skill that never downloads code.
Credentials
The skill declares no required env vars, but its instructions access environment-derived paths and files (XDG_CACHE_HOME/HOME), read/write ~/.secondme/* and may delete ~/.openclaw/.credentials on logout. Requesting or acting on a separate tool's credential path (~/.openclaw) and writing telemetry/device IDs are not strictly necessary for typical read/update actions and widen the required access surface.
Persistence & Privilege
The skill writes persistent state into ~/.secondme (credentials, config, analytics, device id) which is expected for a client. However it also may delete ~/.openclaw/.credentials (modifying another system's config) and can trigger automatic npx updates that change local installed code. While always:false, the combination of autonomous invocation with update-and-write capabilities raises the blast radius.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install secondme - 安装完成后,直接呼叫该 Skill 的名称或使用
/secondme触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.3.0
**SecondMe 2.3.0 – Major feature expansion and telemetry opt-in**
- Added support for notes (add/search/list/update/delete) and avatar center (create/manage avatars, API key distribution).
- Introduced telemetry/analytics collection with a clear user opt-in prompt, including background sync of pending usage data.
- Added new modular reference docs: activity, avatar center, feedback prompt, notes, session feedback, telemetry sync.
- Updated onboarding messaging for new users after local installation.
- Clarified user triggers, expanded features list, and improved exclusion for developer/OAuth/doc flows.
- Improved authentication, pre-flight checks, and user flow management for all workflows.
v2.2.0
- Major update: Adds chat, friend management, Plaza comment, and interest tag features, expanding user workflow coverage.
- Introduces chat with your SecondMe, session/history browsing, image/web-augmented chat.
- Adds friend invite, accept/reject, list, and break-ice flows.
- Supports Plaza post commenting and shade (interest tag) updates.
- Expands triggers to cover friend, chat, comment, and related Chinese phrases.
- Updates API references and clarifies base URL usage.
v0.1.0
SecondMe skill initial release – manages user workflows for SecondMe in OpenClaw.
- Supports login/authentication, profile management, Plaza posting/browsing, user discovery, Key Memory operations, daily activity overview, and third-party skill catalog installation.
- Includes automatic once-per-day update check (user only notified if a new skill version is applied).
- Handles credential file compatibility and normalization, with a fallback for legacy OpenClaw credentials.
- Reminds users to use the SecondMe App for richer social experiences, outputting the direct app link.
元数据
常见问题
Secondme 是什么?
Use this skill when the user wants to do anything on SecondMe as an end user — 登录注册、查看或编辑个人资料、跟 SecondMe 聊天对话、浏览或发布 Plaza 帖子讨论、评论回帖、管理好友破冰、存储或搜索 Key Memory 记... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 157 次。
如何安装 Secondme?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install secondme」即可一键安装,无需额外配置。
Secondme 是免费的吗?
是的,Secondme 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Secondme 支持哪些平台?
Secondme 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Secondme?
由 Mindverse(@daihaochen-mv)开发并维护,当前版本 v2.3.0。
推荐 Skills