← 返回 Skills 市场
286
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install st-ent-skills
功能描述
Search 699pic enterprise photo/video assets, check whether an asset was already downloaded, inspect download records, and generate download links through the...
安全使用建议
This skill's code is consistent with its stated purpose, but its package metadata omits key operational requirements. Before installing or running it: (1) verify you control the SERVICE_API_KEY you will provide (do not use a shared/unknown key); (2) inspect scripts/openapi.js yourself and confirm the base URL (default: https://pre-st-api.699pic.com) is the correct target for your enterprise; (3) ensure node and, if you plan to use the MCP path, mcporter are present and that any local mcporter registration named st-mcp is audited for commands/permissions; (4) ask the publisher to update registry metadata to declare SERVICE_API_KEY and required binaries — absence of those declarations is the primary coherence issue. If you cannot verify the API key ownership or the target endpoint, do not install or run the skill.
功能分析
Type: OpenClaw Skill
Name: st-ent-skills
Version: 0.1.2
The skill bundle provides a legitimate integration with the 699pic (摄图网) enterprise API for searching, verifying, and downloading photo and video assets. The implementation in `scripts/openapi.js` is a standard API wrapper using environment variables for authentication, and the instructions in `SKILL.md` include proactive security recommendations, such as auditing scripts and avoiding shared API keys, rather than attempting to subvert the agent.
能力评估
Purpose & Capability
The skill's name/description match the included scripts and SKILL.md (search, check downloaded, generate links). However the registry metadata lists no required env vars or binaries, while the runtime instructions and scripts clearly require SERVICE_API_KEY, node, and (for the MCP path) mcporter. That mismatch is incoherent: a skill that needs an API key and mcporter should declare them in its requirements.
Instruction Scope
SKILL.md keeps scope focused on asset search/download workflows and explicitly instructs the operator to review scripts and local mcporter config. The runtime instructions do not ask the agent to read unrelated system files or exfiltrate data elsewhere. One caveat: the instructions default to using a built-in base URL (https://pre-st-api.699pic.com) if SERVICE_API_BASE_URL is not set — the script will call that external endpoint, so users must confirm that endpoint and their API key are correct.
Install Mechanism
There is no install spec (instruction-only with bundled scripts), so nothing is downloaded or extracted by an installer. Included files are small scripts and a Node.js script; no remote install URLs or installer actions are present.
Credentials
The scripts require SERVICE_API_KEY (and optionally SERVICE_API_BASE_URL) and expect node and optionally mcporter to be available. The registry metadata, however, declares no required env vars or primary credential and no binaries — this omission reduces transparency and is disproportionate to the declared metadata. The only sensitive item requested is an API key for the service, which is reasonable for this purpose, but it must be explicitly declared so users know what will be accessed.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable. It does not request persistent system privileges or write to other skills' config based on the provided files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install st-ent-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/st-ent-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.2
- Added environment trust and audit guidelines: clarify not to use unknown/shared API keys and require script/config inspection before running.
- Updated security and precondition notes in SKILL.md to emphasize user responsibility for API keys and service endpoint trust.
- Minor language clarifications throughout documentation.
- No changes to workflows or API usage.
v0.1.1
- Renamed skill from 699pic-openapi to st-ent-mcp to reflect broader enterprise support.
- Added explicit preconditions about Node.js, mcporter, and environment variable requirements for increased clarity and safety.
- Updated all example script paths and environment usage to reference the new repository and avoid hardcoded user-specific configs.
- Clarified steps for verifying mcporter service registration, config locations, and permissions before production use.
- Instructions and workflow remain the same, but environment checks and fallback details have been strengthened for reliability.
v0.1.0
- Initial release of the 699pic OpenAPI skill for searching and managing enterprise photo and video assets.
- Supports: searching assets, checking download status, viewing download records, generating download links via local OpenAPI integration.
- Outputs search results in Markdown with embedded image previews by default.
- Includes workflow guidance for local MCP/`mcporter` and direct script fallback.
- Response format prioritizes concise Markdown summaries, not plain URL lists or raw JSON.
元数据
常见问题
St Ent Mcp 是什么？
Search 699pic enterprise photo/video assets, check whether an asset was already downloaded, inspect download records, and generate download links through the... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 286 次。
如何安装 St Ent Mcp？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install st-ent-skills」即可一键安装，无需额外配置。
St Ent Mcp 是免费的吗？
是的，St Ent Mcp 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
St Ent Mcp 支持哪些平台？
St Ent Mcp 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 St Ent Mcp？
由 st699pic（@st699pic）开发并维护，当前版本 v0.1.2。
推荐 Skills