← 返回 Skills 市场
richiecyq

SkillBoss

作者 Richiecyq · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
76
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install skillbossapp
功能描述
Give your OpenClaw agent access to 354+ tools (100+ LLMs, web scraping, search, image/video/audio generation, email) through one API key with signed JWT audi...
安全使用建议
Before installing: 1) Treat SKILLBOSS_API_KEY as a sensitive credential — only provision a scoped/trial key for testing (the SKILL.md documents a $0.50 anonymous trial endpoint you can use). 2) Verify the npm package identity and review the published package contents (dist files) to ensure they match the source here. 3) Confirm the metadata inconsistencies are resolved (registry listing should declare the required env var). 4) Restrict the plugin's per-call and per-agent budgets (maxCostPerCallUsd and server-side wallet rules) to prevent unexpected spend. 5) Consider using a sub-wallet or a low-balance/trial key for experiments and review signed receipts to reconcile activity. 6) Review SkillBoss's privacy/terms to understand what data may be routed to third-party model vendors via their gateway — any sensitive prompts or data sent through the plugin will flow to external models. If you need this in an org environment, validate with your security/compliance team before provisioning a production API key.
能力标签
cryptorequires-walletcan-make-purchases
能力评估
Purpose & Capability
The plugin's code and SKILL.md consistently require a SkillBoss API key and route all calls to api.skillboss.co, which is coherent with the stated purpose. However the registry metadata at the top incorrectly lists "Required env vars: none" and "Primary credential: none" even though openclaw.plugin.json, marketplace.json, and SKILL.md all require SKILLBOSS_API_KEY (apiKey in configSchema). There are also inconsistent catalog size claims (SKILL.md: 354+; README/manifest: 700+). These mismatches are suspicious because they make it harder to audit what credentials the plugin needs and why.
Instruction Scope
The SKILL.md and README instruct the agent/user to obtain and export a SkillBoss API key, install the npm package, and use the provided tools (chat, scrape, search, generate_image, send_email, run, etc.). The instructions themselves do not request other unrelated system files or credentials, and the code only uses the configured API key and network calls to SkillBoss endpoints. That scope is appropriate for a gateway/wallet plugin.
Install Mechanism
Installation is via the npm package skillboss-openclaw-plugin (no remote archive downloads). The registry summary claimed "No install spec — instruction-only skill," but the package includes code and a package.json indicating an npm distribution. This inconsistency (instruction-only vs packaged code) is not necessarily malicious but is an operational/integrity concern you should clarify before install. Npm installs are standard but still carry risk; review the published npm package and its integrity (checksums/signature) if you plan to use it.
Credentials
Functionally the plugin needs a single API credential (SkillBoss API key) which is proportionate to a multi-vendor gateway. However the top-level registry metadata omitted this requirement while other manifests require SKILLBOSS_API_KEY (openclaw.plugin.json configSchema and .claude-plugin/marketplace.json). That omission is an inconsistency worth flagging: it could be a packaging error or an attempt to hide required secrets. No other unrelated secrets are requested by the code.
Persistence & Privilege
The skill does not request always: true, does not modify other skills' configurations, and only runs as a normal user-invocable plugin. It will make outbound network requests (expected for a gateway) but does not request elevated platform privileges in the provided manifests.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install skillbossapp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /skillbossapp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of SkillBoss plugin
元数据
Slug skillbossapp
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

SkillBoss 是什么?

Give your OpenClaw agent access to 354+ tools (100+ LLMs, web scraping, search, image/video/audio generation, email) through one API key with signed JWT audi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 76 次。

如何安装 SkillBoss?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install skillbossapp」即可一键安装,无需额外配置。

SkillBoss 是免费的吗?

是的,SkillBoss 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

SkillBoss 支持哪些平台?

SkillBoss 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 SkillBoss?

由 Richiecyq(@richiecyq)开发并维护,当前版本 v1.0.0。

💬 留言讨论