Strategy Consultant Package

提供市场调研、竞争分析、商业模式验证和财务预测，支持访谈设计与专家咨询的战略咨询全流程工具包。

This package appears to be a legitimate strategy/consulting toolkit, but there are several red flags you should resolve before installing or supplying credentials: 1) BRAVE_API_KEY is referenced in docs (and used by the Brave integration examples) but the skill metadata does not declare any required environment variables — ask the author to explicitly declare BRAVE_API_KEY (and any other secrets) in requires.env before providing keys. 2) The docs instruct editing ~/.openclaw/gateway/config.yaml or running openclaw configure to store the API key. Editing gateway config grants the skill platform‑wide access if the gateway is shared — only do this after you trust the skill source. Prefer setting credentials in a per-project environment rather than a global gateway if possible. 3) Metadata inconsistencies: _meta.json, SKILL.md versions, and the owner IDs differ across files. Confirm the authoritative source (publisher) and that the package hasn't been tampered with. 4) Expert library includes many high‑profile real people presented as 'expert opinions' — this is a content/impersonation risk (not a technical exploit). Decide whether you are comfortable using generated/summarized opinions attributed to public figures. 5) Because the skill can be invoked autonomously by agents (normal default), avoid giving it sensitive keys until the above are clarified. If you must test it, run in an isolated/non‑production environment and use a throwaway Brave API key or restrict network access. Request clarifications from the publisher: explicit required env vars, why gateway config edits are needed, confirmation of owner/publisher identity, and a signed/versioned manifest. If they cannot provide clear answers, treat the skill as untrusted and do not supply real API keys or modify global gateway configs.

Type: OpenClaw Skill Name: strategy-consultant-package Version: 1.0.0 The Strategy Consultant Skill bundle is a well-documented set of tools and instructions designed to assist an AI agent in market research and business analysis. The Python tool `tools/brave_search.py` is a simple query generator that lacks any network-reaching or file-writing code, and the documentation in `docs/brave-setup.md` provides standard instructions for users to configure their own API keys. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the content is entirely aligned with its stated purpose of providing strategic insights and expert simulations.