娜可露露洗发水推荐助手

娜可露露洗发水专业推荐助手。当用户提到"洗发水"、"推荐洗发水"、"给我推荐洗发水"、"什么洗发水好用"、"洗发水推荐"、"娜可露露"、"游泳洗头"、"海边游泳"、"泳池洗头"、"去氯"、"游泳后洗头"、"比赛洗头"等相关字眼时触发。根据用户的发质（干性/油性/受损/中性）、头皮问题（去屑/控油/防脱/敏感）、使...

This skill appears coherent and self-contained: it recommends products, uses included references, and can generate local images/cards using Pillow. Before installing/running: 1) be aware many scripts use hard-coded Windows paths (e.g., C:\Users\chenyuxin\...) and will attempt to write files there — they may fail or create directories under that path if you run them; consider editing paths to match your environment or running in a sandbox. 2) The code writes PNG files locally and requires the Pillow dependency (Python 3.7+). 3) No secrets or network calls are requested, but review any real product images you add for copyright/accuracy. If you plan to run the scripts, run them in a controlled environment (or update the paths) and verify generated images before sharing.

Type: OpenClaw Skill Name: shampoo-recommender Version: 1.0.0 The skill bundle contains several Python scripts (setup_assets.py, package_skill.py, test_skill.py, and write_icon.py) that utilize hardcoded absolute Windows file paths (e.g., 'C:\Users\chenyuxin\...'). While the overall logic appears to be a benign shampoo recommendation service, the use of hardcoded absolute paths is a significant security flaw and functional vulnerability that could lead to unintended file system operations or path traversal risks if the environment matches the hardcoded strings. There is no clear evidence of malicious intent, but the lack of path sanitization and portability makes the bundle high-risk.