← 返回 Skills 市场
Technical Blog Writing
作者
Ömer Karışman
· GitHub ↗
· v0.1.5
912
总下载
1
收藏
5
当前安装
2
版本数
在 OpenClaw 中安装
/install technical-blog-writing
功能描述
Technical blog post writing with structure, code examples, and developer audience conventions. Covers post types, code formatting, explanation depth, and dev...
安全使用建议
This skill appears to be a legitimate guide for writing technical blog posts, but it tells you to install and use a third-party CLI (inference.sh) by piping a remote script to sh and to run commands that contact inference.sh services. Before running any installer: inspect the install script manually (do not pipe to sh blindly), verify checksums from the provided URL, prefer installing in an isolated environment (container or VM) if you want to test, and consider whether you are comfortable sending draft content or prompts to an external service. Also note the metadata doesn't declare the infsh binary as required — if you trust and need infsh, add it explicitly or avoid the install. If you want a purely offline skill, do not follow the installer steps.
功能分析
Type: OpenClaw Skill
Name: technical-blog-writing
Version: 0.1.5
The skill is classified as suspicious due to the inclusion of `curl -fsSL https://cli.inference.sh | sh` for installation, which executes a remote script directly, and more critically, the instruction to use `infsh app run infsh/python-executor` in SKILL.md. This `python-executor` capability allows the AI agent to execute arbitrary Python code, creating a significant prompt injection vulnerability that could lead to remote code execution if the agent is manipulated. While the provided examples are benign and align with the stated purpose, the inherent risk of these capabilities warrants a 'suspicious' classification.
能力评估
Purpose & Capability
The SKILL.md content is a coherent technical-blog-writing guide and aligns with the skill name/description. It does, however, rely on the external inference.sh CLI for research and image generation (infsh commands shown) even though the skill metadata lists no required binaries or environment variables — a minor mismatch between declared requirements and the documented runtime tools.
Instruction Scope
The instructions explicitly tell users/agents to run a remote install command (curl -fsSL https://cli.inference.sh | sh) and to invoke infsh app run commands that will contact inference.sh services. That means content may be transmitted to an external service and an installer script from the network will be executed if followed. The rest of the writing guidance stays on-topic and does not ask the agent to read unrelated files or secrets.
Install Mechanism
There is no registry install spec, but SKILL.md recommends a remote installation via curl | sh from cli.inference.sh and points to dist.inference.sh for checksums. This is a higher-risk install pattern (remote script execution); while checksums are referenced, the domain is not a well-known release host like GitHub in the doc and the skill does not enforce/declare the CLI as a required binary in metadata.
Credentials
The skill requests no environment variables, credentials, or config paths in metadata. The instructions likewise do not ask for unrelated secrets or to read system credentials. The only external dependency is the optional inference.sh service/CLI referenced in the doc.
Persistence & Privilege
The skill is instruction-only, has always:false, and does not request persistent system privileges in its metadata. That said, following the SKILL.md installer would add a third-party CLI to the system — the skill itself does not request or claim persistent privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install technical-blog-writing - 安装完成后，直接呼叫该 Skill 的名称或使用
/technical-blog-writing触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.5
technical-blog-writing 0.1.5
- Added detailed SKILL.md describing technical blog writing structure, conventions, and best practices for developer-focused content.
- Included clear post type templates (tutorials, deep dives, benchmarks, postmortems, architecture).
- Outlined writing rules, code example guidelines, explanation depth, and developer audience engagement patterns.
- Provided sample CLI usage instructions and install notes for [inference.sh](https://inference.sh).
- Listed word count ranges, structural templates, and diagram usage recommendations for different post types.
v0.1.0
- Initial release of the technical-blog-writing skill.
- Provides structured templates for five common technical post types: tutorial, deep dive, postmortem, benchmark, and architecture.
- Includes writing conventions tailored to developers, such as code formatting, explanation depth, and engagement patterns.
- Offers rules and best practices for writing, code examples, diagram usage, and post structure.
- Details word count guidelines and when to use visuals or diagrams in technical blog posts.
元数据
常见问题
Technical Blog Writing 是什么？
Technical blog post writing with structure, code examples, and developer audience conventions. Covers post types, code formatting, explanation depth, and dev... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 912 次。
如何安装 Technical Blog Writing？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install technical-blog-writing」即可一键安装，无需额外配置。
Technical Blog Writing 是免费的吗？
是的，Technical Blog Writing 完全免费（开源免费），可自由下载、安装和使用。
Technical Blog Writing 支持哪些平台？
Technical Blog Writing 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Technical Blog Writing？
由 Ömer Karışman（@okaris）开发并维护，当前版本 v0.1.5。
推荐 Skills