v2ex

V2EX API 2.0 integration for accessing V2EX forum data, notifications, topics, nodes, and member profiles

This skill appears to be a straightforward V2EX API helper, but the package metadata omits the fact that a Personal Access Token is required. Before installing: 1) Verify the skill's source/homepage or contact the publisher to confirm origin and intent. 2) Confirm how you will supply the token to the platform (environment variable like V2EX_TOKEN is suggested by SKILL.md) and that the platform will treat it as a secret. 3) Use a least-privilege/rotatable token and avoid pasting the token into chat or non-secret storage. 4) Ask the publisher to update the registry metadata to declare the required credential so the platform and users can make an informed decision. If you cannot verify the source or ensure secret handling, do not provide your token.

Type: OpenClaw Skill Name: v2ex Version: 1.0.0 The skill bundle provides a legitimate integration with the V2EX API. The `SKILL.md` documentation and the embedded Python example code correctly instruct users to obtain and securely store an API token, which is then retrieved from an environment variable (`V2EX_TOKEN`) for authentication. All network requests are directed to the official `https://www.v2ex.com` domain, aligning with the stated purpose. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent.