← 返回 Skills 市场
130
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install skylv-cross-platform-bot-builder
功能描述
跨平台 Bot 生成器。一键生成 Telegram/微信/抖音/Discord Bot,统一 API,多平台部署。Triggers: bot builder, telegram bot, wechat bot, discord bot, multi-platform bot.
安全使用建议
This skill appears to be a legitimate cross-platform bot framework, but it references many platform tokens and an npm package without declaring them. Before installing or running any commands (npx bot-builder, installing @skylv/bot-builder, or providing tokens), do the following:
- Verify the npm package and its publisher: search for '@skylv/bot-builder' on npm, inspect its source repository, release history, and maintainers. Do not run npx against an unverified package.
- Treat all platform tokens (Telegram/Discord/WeChat/Douyin etc.) as sensitive: use least-privilege tokens, rotate them, and prefer scoped or test accounts. Do not paste production tokens into untrusted shells or services.
- Because the skill metadata declares no required env vars, ask the skill author to explicitly list required credentials and scopes (and why each is needed). The inconsistency increases risk.
- Run initial experiments in an isolated environment (ephemeral machine, container) with non-production tokens, and inspect any generated project files before starting services.
- If you plan to deploy (Docker, Vercel), review generated Dockerfiles and serverless configs for unexpected network calls or secrets baked into images.
If you cannot validate the upstream package/source, treat this skill as untrusted and avoid running its automated install (npx / npm) or providing high-privilege credentials.
功能分析
Type: OpenClaw Skill
Name: skylv-cross-platform-bot-builder
Version: 1.0.3
The skill bundle appears to be a documentation-focused template or guide for a cross-platform bot builder utility. The provided files (_meta.json and SKILL.md) contain metadata, usage examples for various bot platforms (Telegram, Discord, WeChat), and descriptions of tool functions for project creation and deployment. No executable code, malicious payloads, or prompt injection attempts were found; the instructions are consistent with the stated purpose of automating bot development.
能力评估
Purpose & Capability
Name/description and the SKILL.md content are consistent: it is a cross-platform bot generator with adapters and deployment guidance for Telegram, Discord, WeChat, Douyin, Slack, WhatsApp, etc. The examples, adapters, and deployment instructions fit the stated purpose.
Instruction Scope
SKILL.md contains runnable examples and configuration that reference local files (.env, config/platforms.json, src/, package.json) and many environment variables (TELEGRAM_BOT_TOKEN, DISCORD_BOT_TOKEN, WECHAT_APP_ID, WECHAT_AES_KEY, etc.). The skill registry declares no required env vars — the instructions therefore rely on secrets/config not declared by the skill. The file does not explicitly tell the agent to exfiltrate data, but it presumes access to credentials and local config which the skill did not advertise.
Install Mechanism
This is an instruction-only skill with no install spec and no bundled code. That minimizes direct install risk. However the examples instruct using npx (npx bot-builder) and an npm package '@skylv/bot-builder' — running npx against an unverified package carries risk; the skill itself does not include or fetch code.
Credentials
The documentation expects many platform credentials and secrets (bot tokens, app secrets, AES keys), but the skill metadata declares no required environment variables or primary credential. Requesting or using multiple high-sensitivity secrets (messaging tokens, app secrets) is expected functionally for a bot framework, but the omission in metadata is an incoherence and increases risk because the agent/user may not be warned which secrets will be accessed or needed.
Persistence & Privilege
Skill is not always-enabled, does not request system paths, and has no install step that modifies agent/system configuration. Autonomous invocation is allowed (default) but is not combined with other privilege escalations.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install skylv-cross-platform-bot-builder - 安装完成后,直接呼叫该 Skill 的名称或使用
/skylv-cross-platform-bot-builder触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
- Updated SKILL.md version from 1.0.1 to 1.0.2
- Simplified and clarified the description field in SKILL.md
- No functional or code changes; documentation only
v1.0.2
- Updated SKILL.md documentation
- Changed version number from 1.0.0 to 1.0.1 in metadata
- No changes to code or functionality; this is a documentation update only
v1.0.1
- Added new frontmatter fields: keywords and triggers for enhanced discoverability and integration.
- Appended a "Usage" section at the end with simple, clear instructions to install, configure, and run the skill.
- No changes to core functionality or APIs.
v1.0.0
Initial release of Cross-Platform Bot Builder.
- One-click creation of bots for Telegram, WeChat, Douyin, Discord, Slack, WhatsApp (testing), and more, with unified API and multi-platform deployment.
- Supports message handling, command responses, media sending, user management, and event handling.
- Provides CLI, code, and config file ways to generate new bot projects.
- Includes modular adapters for each platform with support for platform-specific features.
- Offers deployment guides for Docker and serverless platforms.
- Adds utility functions for bot creation, deployment, and performance analysis.
- Chinese/English documentation and example code.
元数据
常见问题
Skylv Cross Platform Bot Builder 是什么?
跨平台 Bot 生成器。一键生成 Telegram/微信/抖音/Discord Bot,统一 API,多平台部署。Triggers: bot builder, telegram bot, wechat bot, discord bot, multi-platform bot. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 130 次。
如何安装 Skylv Cross Platform Bot Builder?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skylv-cross-platform-bot-builder」即可一键安装,无需额外配置。
Skylv Cross Platform Bot Builder 是免费的吗?
是的,Skylv Cross Platform Bot Builder 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Skylv Cross Platform Bot Builder 支持哪些平台?
Skylv Cross Platform Bot Builder 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Skylv Cross Platform Bot Builder?
由 SKY-lv(@sky-lv)开发并维护,当前版本 v1.0.3。
推荐 Skills