← 返回 Skills 市场
369
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install xiachat-cli
功能描述
XiaChat CLI 命令行 — SOUL 档案管理、人格匹配、AI 分身预聊天、Soul Square 角色聊天 / XiaChat CLI — SOUL profile management, personality matching, AI avatar pre-chat, persona chat fr...
安全使用建议
Before installing or using this skill: (1) Note the SKILL.md requires an XIACHAT_API_KEY but the registry metadata does not declare it — expect to provide a sensitive API token. Only use a key with minimum permissions and verify how XiaChat describes key scopes. (2) The doc tells you to run 'npm install -g xiachat' (global npm install). Treat global npm installs as potentially risky: inspect the npm package (and its GitHub repo/source code), verify the publisher, and prefer installing in a sandboxed environment if you are unsure. (3) Confirm the CLI package's provenance on npm or the project's GitHub and check whether xiachat.com is the official source. (4) Because the skill uses Bash and file reads, be careful which local files (e.g., SOUL.md, chat exports) you point it at — it will process whatever you provide. (5) If you want to proceed, ask the publisher to update the skill manifest to declare XIACHAT_API_KEY as a required env var and to provide an explicit, auditable install spec (link to npm/GitHub and checksums) to reduce uncertainty.
功能分析
Type: OpenClaw Skill
Name: xiachat-cli
Version: 1.0.0
The xiachat-cli skill bundle provides instructions for an AI agent to interact with the XiaChat service via a command-line interface. The SKILL.md file outlines standard procedures for installing an npm package (xiachat), configuring API keys, and managing personality profiles by reading local files (e.g., SOUL.md). The requested permissions (Bash, Read) and the command sequences are entirely consistent with the stated purpose of personality matching and AI persona management, with no evidence of malicious intent, obfuscation, or unauthorized data exfiltration.
能力评估
Purpose & Capability
The name/description and the runtime instructions align: this is a CLI for XiaChat functionality (SOUL profile management, matching, pre-chat, persona chat). Requesting an XIACHAT_API_KEY is appropriate for a remote API-based CLI. However, the registry metadata lists no required environment variables while the SKILL.md explicitly instructs users to set XIACHAT_API_KEY — an inconsistency that should be resolved before trusting the skill.
Instruction Scope
SKILL.md stays within the claimed scope: it shows commands for creating/importing/exporting profile files, reading user-provided files (SOUL.md, chat exports), matching, starting pre-chats, and querying credits. It also instructs using stdin/stdout and writing output files, which is expected for a CLI. The doc allows the agent to run Bash and read files (allowed-tools: Bash, Read) — that is normal for a CLI skill but means the agent could read any file paths you supply (e.g., ~/clawd/SOUL.md).
Install Mechanism
There is no declared install spec in the registry, yet SKILL.md instructs 'npm install -g xiachat'. Having the skill recommend a global npm install is typical for CLIs but raises risk because npm packages execute arbitrary code at install/runtime. The skill offers no guidance about package provenance (no npm/GitHub link or checksum). Because installation would pull code from the public registry without an install spec in the skill manifest, this is a proportionate but notable risk.
Credentials
SKILL.md requires XIACHAT_API_KEY (sensitive credential) to operate, which is proportionate to contacting XiaChat's API. However, the registry metadata did not declare any required env vars or a primary credential. That mismatch is important: the agent/installation UI may not inform users that a secret is required or expected format ('xk_...'). Ensure XIACHAT_API_KEY is explicitly declared and limit scope/permissions of the key if possible.
Persistence & Privilege
The skill is not always-enabled and does not request system config paths or modify other skills. It only suggests installing a CLI tool and using environment variables. Autonomous invocation is allowed by platform default but not itself unusual here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install xiachat-cli - 安装完成后,直接呼叫该 Skill 的名称或使用
/xiachat-cli触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — 11 CLI commands for SOUL profiles, personality matching, avatar pre-chat, Soul Square
元数据
常见问题
XiaChat CLI — AI Personality Matching 是什么?
XiaChat CLI 命令行 — SOUL 档案管理、人格匹配、AI 分身预聊天、Soul Square 角色聊天 / XiaChat CLI — SOUL profile management, personality matching, AI avatar pre-chat, persona chat fr... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 369 次。
如何安装 XiaChat CLI — AI Personality Matching?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xiachat-cli」即可一键安装,无需额外配置。
XiaChat CLI — AI Personality Matching 是免费的吗?
是的,XiaChat CLI — AI Personality Matching 完全免费(开源免费),可自由下载、安装和使用。
XiaChat CLI — AI Personality Matching 支持哪些平台?
XiaChat CLI — AI Personality Matching 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 XiaChat CLI — AI Personality Matching?
由 KLeo(@lizhijun)开发并维护,当前版本 v1.0.0。
推荐 Skills