← 返回 Skills 市场
429
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install teleskopiq
功能描述
Creates and manages AI-generated YouTube scripts, metadata, thumbnails, and schedules via a GraphQL API with specialized Markdown tags for production.
安全使用建议
This skill appears to implement what it claims (a Teleskopiq GraphQL client) but there are packaging inconsistencies you should resolve before installing: skill.json and SKILL.md require a secret TELESKOPIQ_API_KEY and list a homepage, yet the registry metadata provided here omitted those. Before use, verify the publisher and homepage (https://teleskopiq.com), confirm you trust that service, and only provide an API key with the least privileges needed. Note there is no automatic installer — the script depends on Python and the requests/websocket-client packages. Review network traffic policy for your environment because the skill will send full script content and prompts to the remote API (this may include sensitive or private information you include in prompts). If you decide to proceed, consider creating a dedicated API key that can be revoked and run the skill in a minimal-privilege environment.
功能分析
Type: OpenClaw Skill
Name: teleskopiq
Version: 1.1.2
The skill is classified as suspicious due to a potential prompt injection vulnerability against the OpenClaw agent. The `SKILL.md` file instructs the agent to "Include the output in your writing context" after executing the `get-style` command. This command, implemented in `scripts/teleskopiq.py`, fetches a style profile from the external `teleskopiq.com` API. If the external API were compromised or malicious, it could inject executable instructions into the style profile, which the OpenClaw agent might then interpret and execute without sanitization, leading to unauthorized actions. While this is a vulnerability in the OpenClaw agent's design rather than direct malice from this skill, the skill facilitates this risky data flow.
能力评估
Purpose & Capability
The SKILL.md and scripts/teleskopiq.py clearly implement a GraphQL-based client that needs a TELESKOPIQ_API_KEY and optional TELESKOPIQ_ENDPOINT — this is coherent with the skill's description. However, the top-level registry metadata included with the evaluation initially reported "no required env vars" and no homepage, while skill.json and SKILL.md declare TELESKOPIQ_API_KEY (required) and a homepage (https://teleskopiq.com). That discrepancy between registry metadata and the files is an inconsistency that should be resolved.
Instruction Scope
The SKILL.md instructs only to set the API key/endpoint, use the included CLI, fetch style profiles, write scripts, and call the remote Teleskopiq GraphQL API. The instructions do not ask the agent to read unrelated local files, system credentials, or send data to unexpected endpoints — all network I/O goes to the declared TELESKOPIQ endpoint. The ai-write flow streams AI output from the service (SSE), which is consistent with the described functionality.
Install Mechanism
This is instruction-only (no install spec). skill.json lists Python requirements (requests, websocket-client), but there is no automated install step — meaning the script will fail unless those packages exist. There is no external download from untrusted URLs and no archive extraction, so install risk is low, but the lack of an install spec is a packaging omission to be aware of.
Credentials
The runtime code and skill.json require a secret TELESKOPIQ_API_KEY (format tsk_...) and optional endpoint, which is appropriate for a remote API client. However, the registry metadata supplied in the evaluation initially listed no required env vars and no primary credential; that mismatch is problematic: users may be unaware this skill needs a secret API key. Verify the registry metadata matches skill.json before trusting the package. Aside from the API key, no other credentials or unrelated env vars are requested.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and declares no config paths. It can be invoked by the agent autonomously (disable-model-invocation is false), which is the platform default and appropriate for an API-integration skill. No excessive persistence or cross-skill modification is present.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install teleskopiq - 安装完成后，直接呼叫该 Skill 的名称或使用
/teleskopiq触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.2
Fix: ai-write now uses SSE (Server-Sent Events) instead of WebSocket — matches Teleskopiq's actual subscription transport. Fix: correct GraphQL field name (script not scriptId).
v1.1.1
Fix metadata: add homepage (teleskopiq.com), sync version to 1.1.0, add websocket-client dependency, clarify TELESKOPIQ_API_KEY is required
v1.1.0
Add get-style command, ai-write command with WebSocket streaming, --ai-write flag on full-flow. Always fetch style profile before writing scripts.
v1.0.4
Fix: default endpoint in teleskopiq.py updated to https://teleskopiq.com/api/graphql — all three files (skill.json, SKILL.md, scripts/teleskopiq.py) now consistent
v1.0.3
Fix: correct default endpoint to https://teleskopiq.com/api/graphql
v1.0.2
Fix: TELESKOPIQ_API_KEY marked required, default endpoint updated to https://app.teleskopiq.com/api/graphql
v1.0.1
Add skill.json manifest with env vars, categories, and requirements metadata
v1.0.0
Initial release — GraphQL API skill for Teleskopiq (YouTube script, metadata, thumbnail, and auto-scheduling)
元数据
常见问题
Teleskopiq 是什么？
Creates and manages AI-generated YouTube scripts, metadata, thumbnails, and schedules via a GraphQL API with specialized Markdown tags for production. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 429 次。
如何安装 Teleskopiq？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install teleskopiq」即可一键安装，无需额外配置。
Teleskopiq 是免费的吗？
是的，Teleskopiq 完全免费（开源免费），可自由下载、安装和使用。
Teleskopiq 支持哪些平台？
Teleskopiq 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Teleskopiq？
由 nethunter（@nethunter）开发并维护，当前版本 v1.1.2。
推荐 Skills