← 返回 Skills 市场
VoteShip
作者
Matt Kilmer
· GitHub ↗
· v0.2.0
272
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install voteship
功能描述
Manage feature requests, votes, roadmaps, and changelogs with VoteShip.
安全使用建议
This skill appears internally consistent with a VoteShip integration, but exercise caution before installing and supplying VOTESHIP_API_KEY: 1) Confirm the npm package (@voteship/mcp-server) exists on a trusted registry (npmjs.org), review its publisher, recent release history, and package contents (bin scripts). 2) Verify the service homepage/docs (https://voteship.app/docs) and that the package maps to the official project. 3) Only provide an API key scoped to the minimal project and rotate it after testing; avoid giving long‑lived global keys when a project‑scoped key is possible. 4) Review any webhook endpoints you configure and monitor audit logs for unexpected activity. If you cannot verify the npm package publisher or the service origin, treat installation as higher risk.
功能分析
Type: OpenClaw Skill
Name: voteship
Version: 0.2.0
The 'voteship' skill is a legitimate integration for the VoteShip platform, designed to manage feature requests, roadmaps, and changelogs. It utilizes a standard MCP server (@voteship/mcp-server) and requires expected environment variables (VOTESHIP_API_KEY) for administrative tasks. The documentation in SKILL.md describes standard SaaS functionality, including AI-assisted triage and analytics, with no evidence of malicious intent, data exfiltration, or prompt injection vulnerabilities.
能力评估
Purpose & Capability
Name, description, and required environment variables (VOTESHIP_API_KEY, VOTESHIP_PROJECT_SLUG) align with a feature‑request / board management integration. The declared node package (@voteship/mcp-server) that provides a voteship-mcp binary is consistent with a CLI helper for the service.
Instruction Scope
SKILL.md contains only VoteShip-related actions (listing/creating/updating posts, votes, tags, webhooks, analytics, AI triage) and references the two declared env vars. It does not instruct the agent to read unrelated system files, arbitrary environment variables, or exfiltrate data to third‑party endpoints beyond configuring webhooks (which is a documented VoteShip feature).
Install Mechanism
The install uses an npm package (@voteship/mcp-server) which is an expected distribution method for a Node CLI, but npm installs are moderate risk because they introduce third‑party code onto the system. No direct URL downloads or archives are used (good). Verify the package publisher and contents before installing.
Credentials
Only two env vars are required, which matches the skill's purpose. However, the VOTESHIP_API_KEY is a high‑privilege credential (admin access according to the docs) that grants full project control (create/delete posts, configure webhooks, update users, sync MRR). Requesting this single key is proportionate to admin functionality but carries elevated risk if misused.
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or system configs. It will install a binary via npm (own artifact) but does not require persistent platform privileges beyond normal installation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install voteship - 安装完成后，直接呼叫该 Skill 的名称或使用
/voteship触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.0
Fix security scan issues: remove npx from required bins, declare VOTESHIP_PROJECT_SLUG in env, clarify admin vs public mode split, clarify Stripe sync uses same API key with no extra credentials, scope privileged operations.
v0.1.5
Initial release — feature requests, votes, roadmaps, changelogs, AI triage, and public board tools.
元数据
常见问题
VoteShip 是什么？
Manage feature requests, votes, roadmaps, and changelogs with VoteShip. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 272 次。
如何安装 VoteShip？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install voteship」即可一键安装，无需额外配置。
VoteShip 是免费的吗？
是的，VoteShip 完全免费（开源免费），可自由下载、安装和使用。
VoteShip 支持哪些平台？
VoteShip 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 VoteShip？
由 Matt Kilmer（@mattkilmer）开发并维护，当前版本 v0.2.0。
推荐 Skills