← 返回 Skills 市场
luokeer52

test-txt

作者 luokeer52 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
81
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install test-txt
功能描述
根据用户输入的选项输出对应古诗。输入A输出《咏柳》,输入B输出《春晓》。运行结果输出到/workspace/assets目录。
安全使用建议
This skill's description suggests a trivial local task, but its runtime actually forwards your input to a remote Prana/Claw service and requires PRANA_SKILL_PUBLIC_KEY/PRANA_SKILL_SECRET_KEY (or will try to fetch them from https://claw-uat.ebonex.io). Before installing or running: 1) Confirm you trust the remote endpoint (claw-uat.ebonex.io) and the owner; 2) Expect the skill to set or require global OpenClaw environment variables — it can auto-inject keys into your process and call POST /api/claw/agent-run; 3) If you want only local behaviour, ask the author to remove remote calls and declare required env vars in the metadata; 4) Run in a sandbox or inspect/modify the scripts if you need to avoid remote execution or persistent state files (~/.prana_skill_state). The mismatch between declared requirements and actual runtime behaviour is the primary concern.
功能分析
Type: OpenClaw Skill Name: test-txt Version: 1.0.0 The skill bundle, ostensibly a simple poem generator ('test-txt'), contains complex logic and instructions for a remote execution framework called 'Prana'. The SKILL.md file directs the AI agent to perform high-risk operations, such as fetching API keys from a remote UAT endpoint (claw-uat.ebonex.io) and modifying the global environment via 'openclaw config set'. The included scripts (prana_skill_client.js and prana_skill_client.py) are thin clients designed to proxy user input to a remote 'agent-run' API and poll for results, which is significantly over-engineered for the stated purpose and introduces risks associated with remote command execution and credential handling.
能力评估
Purpose & Capability
The skill description says it outputs a chosen poem to /workspace/assets (a simple, local task) but the package contains thin-client scripts that forward input to a remote Prana/Claw service (POST /api/claw/agent-run, GET /api/v1/api-keys, etc.). The registry metadata declares no required environment variables or credentials, yet the runtime expects PRANA_SKILL_PUBLIC_KEY/PRANA_SKILL_SECRET_KEY (or to fetch them), which is disproportionate and not documented in the description/metadata.
Instruction Scope
SKILL.md instructs the agent to check/set environment variables, call a remote API to fetch API keys, set OpenClaw global env via `openclaw config set env.*`, call POST /api/claw/agent-run and poll /agent-result, and surface returned data to users unchanged. It also instructs use of local thin clients (node/python). These steps go well beyond just writing a local poem file: they read/write environment, contact external endpoints, and rely on remote execution of the actual capability.
Install Mechanism
There is no install spec (instruction-only), which limits install-time risk. However, the included scripts require runtime dependencies (node yaml or python pyyaml) and will perform network operations when run. No arbitrary downloads from unknown URLs are present in the package itself.
Credentials
The skill package metadata lists no required env vars, but SKILL.md and the client scripts require PRANA_SKILL_PUBLIC_KEY and PRANA_SKILL_SECRET_KEY (or will attempt to GET them from https://claw-uat.ebonex.io/api/v1/api-keys). That mismatch is a red flag: the skill will request and use credentials that were not declared in the registry entry. The skill also suggests configuring global OpenClaw env variables which affects broader agent environment.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. The thin clients create/consume a thread ID state file in the user's home or temp directory (~/.prana_skill_state) which is persistent on disk and may remain after execution. That file storage is expected for multi-turn state but should be noted by users.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install test-txt
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /test-txt 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
test-txt 1.0.0 - Initial release providing a skill to output specific Chinese poems based on user input: input A returns《咏柳》, input B returns《春晓》. - Output results are saved to the /workspace/assets directory. - Includes detailed environment variable setup and key management process using OpenClaw and Prana integration. - Supports both Node.js (default) and Python 3 as runtime options, with installation and execution instructions. - Describes how to retrieve Prana skill purchase history with relevant API usage and authentication steps.
元数据
Slug test-txt
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

test-txt 是什么?

根据用户输入的选项输出对应古诗。输入A输出《咏柳》,输入B输出《春晓》。运行结果输出到/workspace/assets目录。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 81 次。

如何安装 test-txt?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install test-txt」即可一键安装,无需额外配置。

test-txt 是免费的吗?

是的,test-txt 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

test-txt 支持哪些平台?

test-txt 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 test-txt?

由 luokeer52(@luokeer52)开发并维护,当前版本 v1.0.0。

💬 留言讨论