← 返回 Skills 市场
93
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install teamapp-admin
功能描述
Use when interacting with TeamApp club admin JSON endpoints on teamapp.com to create/read/update News articles and Schedule events, and to resolve Team and A...
安全使用建议
This skill appears to implement TeamApp admin operations and includes a shell wrapper that requires your browser's ta_auth_token cookie (TA_AUTH_TOKEN) and likely a TA_CLUB_ID environment variable. Before installing or using it: 1) Verify the publisher/source (there is no homepage listed). 2) Understand that you must supply a live session cookie — treat it like a password: do not share it with untrusted code. 3) Prefer using an account with limited privileges and rotate the cookie after use. 4) Confirm the registry metadata is corrected to list TA_AUTH_TOKEN (and TA_CLUB_ID if required). 5) Optionally review/scan the wrapper script yourself (it is short and only talks to teamapp.com and the user-provided URLs). If you cannot verify the author or are unwilling to provide a session cookie, do not install or use this skill.
功能分析
Type: OpenClaw Skill
Name: teamapp-admin
Version: 1.0.0
The skill bundle provides a functional interface for the TeamApp API but contains significant security vulnerabilities in its credential handling logic. The wrapper script `bin/api-wrapper.sh` accepts an arbitrary URL and automatically attaches the sensitive `TA_AUTH_TOKEN` to the request headers without validating that the destination is a legitimate TeamApp domain, which could lead to credential exfiltration if the agent is manipulated. Additionally, the script stores session cookies and CSRF tokens in world-readable locations (`/tmp/teamapp_cookies.txt`), posing a risk on multi-user systems.
能力评估
Purpose & Capability
The name, SKILL.md, and the included api-map and wrapper script all align with managing TeamApp club admin JSON endpoints (news, events, teams, access groups). However the registry metadata claims no required env vars while the wrapper script and SKILL.md require a sensitive TA_AUTH_TOKEN cookie; examples also reference TA_CLUB_ID which is not declared. The lack of a homepage or known source reduces provenance.
Instruction Scope
Runtime instructions are focused on reading JSON schemas and using the provided wrapper to call TeamApp endpoints; they do not instruct the agent to read arbitrary system files. The wrapper enforces session bootstrapping, CSRF extraction, and cookie management which are reasonable for the stated purpose. However examples reference an undeclared TA_CLUB_ID env var and the instructions insist on injecting a browser cookie value (TA_AUTH_TOKEN), a sensitive credential.
Install Mechanism
There is no install spec (instruction-only with one shell wrapper file). Nothing is downloaded or installed by the skill, which keeps install risk low.
Credentials
The script requires TA_AUTH_TOKEN (the ta_auth_token cookie) — a sensitive credential appropriate for web session actions, but the registry metadata falsely lists no required env vars. Examples also use TA_CLUB_ID but it is not declared. Requesting a live session cookie is proportionate to the capability but the metadata/instructions mismatch and lack of provenance are concerning.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configs, and only writes temporary files under /tmp for cookies/CSRF. Autonomy is allowed (default) but that is normal for skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install teamapp-admin - 安装完成后，直接呼叫该 Skill 的名称或使用
/teamapp-admin触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the teamapp-admin-api skill.
- Enables interaction with TeamApp club admin JSON endpoints to manage News articles and Schedule events.
- Supports ID resolution workflows for teams and access groups.
- Requires all API requests to be routed through the provided bash wrapper for authentication/session management.
- Provides examples and reference for required payload fields and notification controls.
- Documentation links key endpoint and schema resources for reliable usage.
元数据
常见问题
TeamApp Admin 是什么？
Use when interacting with TeamApp club admin JSON endpoints on teamapp.com to create/read/update News articles and Schedule events, and to resolve Team and A... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 93 次。
如何安装 TeamApp Admin？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install teamapp-admin」即可一键安装，无需额外配置。
TeamApp Admin 是免费的吗？
是的，TeamApp Admin 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
TeamApp Admin 支持哪些平台？
TeamApp Admin 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TeamApp Admin？
由 Steve G（@thed000d）开发并维护，当前版本 v1.0.0。
推荐 Skills