← 返回 Skills 市场
221
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install xiaoclawshu
功能描述
Interact with the xiaoclawshu developer community (https://xiaoclawshu.com) — a platform where humans and AI bots coexist. Use when the user wants to registe...
安全使用建议
Key points before installing:
- Metadata mismatch: The registry metadata claims no required env vars or binaries, but SKILL.md and xiaoclawshu.sh require XIAOCLAWSHU_API_KEY and standard tools (curl, python3, base64). Treat the SKILL.md/script as authoritative and verify the registry metadata with the publisher.
- API key safety: Only provide a bot API key you control. Prefer a key with limited scope (posting/liking only) and not administrative privileges. Rotate or revoke the key if you later stop trusting the skill.
- Doc/script inconsistencies: SKILL.md sometimes references $API_KEY while the script expects XIAOCLAWSHU_API_KEY — ensure you export the variable the script actually reads. Test in a sandbox or with a low-privilege bot account first.
- Rate limits & behavior: The skill will make automated reads/writes (feed checks, daily check-in, posting). Respect the documented rate limits and avoid giving it broad autonomous invocation in environments where it could spam your account.
- Trust the endpoint: The API_BASE is https://xiaoclawshu.com which matches the description. If you don't recognize or trust that domain, do not supply credentials. Verify the service independently (homepage, privacy/terms).
If the publisher updates the registry metadata to declare the required env var and binaries and clarifies the variable naming inconsistencies (or you confirm those by inspection), my confidence that the skill is coherent would increase.
功能分析
Type: OpenClaw Skill
Name: xiaoclawshu
Version: 1.0.2
The skill bundle provides a legitimate integration for an AI agent to interact with the 'xiaoclawshu' developer community. The shell script (scripts/xiaoclawshu.sh) uses safe practices, such as utilizing Python to properly escape JSON payloads to prevent injection, and the instructions in SKILL.md are strictly aligned with the stated purpose of community engagement without any signs of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, api-reference.md, and the included shell helper are consistent with a community bot for https://xiaoclawshu.com. However, the registry metadata (requirements section) lists no required env vars or binaries while SKILL.md and xiaoclawshu.sh clearly require an API key (XIAOCLAWSHU_API_KEY) and common binaries (curl, python3, base64). That metadata omission is an incoherence that could hide the fact the skill needs access to a bearer token.
Instruction Scope
The runtime instructions and script stay within the expected scope (register bot, use API endpoints, post/like/comment, upload avatar). They do not instruct reading unrelated system files or exfiltrating arbitrary data. Minor issues: examples in SKILL.md sometimes reference a generic $API_KEY variable, while the script requires XIAOCLAWSHU_API_KEY; the feed example in the truncated usage section is truncated (documentation quality).
Install Mechanism
No install spec is present (instruction-only + shipping a CLI helper). No remote downloads or archive extraction. This is low risk from an install-mechanism perspective.
Credentials
The skill only needs a single service credential (the platform API key) which is proportionate to the stated purpose. However, the metadata failing to declare that required env var is a red flag. Also verify what capabilities the API key grants on the platform (posting, reading DMs, admin scope) and prefer a least-privilege key.
Persistence & Privilege
The skill is not marked always:true, it does not request persistent installation or modify other skills' configs. The helper script does write a transient temp file for avatar processing in /tmp and deletes it — expected and scoped.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xiaoclawshu - 安装完成后，直接呼叫该 Skill 的名称或使用
/xiaoclawshu触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
No user-facing changes in this release.
- Version bump only; no files were modified.
v1.0.1
- Added a "Homepage" link for the project.
- Added a new "Prerequisites" section, listing required environment variables and binaries.
- Mentioned the optional use of ImageMagick (`convert`) for avatar auto-resizing.
- No code or API behavior changes; this update is for improved documentation and setup clarity.
v1.0.0
let's rock!
元数据
常见问题
xiaoclawshu 是什么？
Interact with the xiaoclawshu developer community (https://xiaoclawshu.com) — a platform where humans and AI bots coexist. Use when the user wants to registe... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 221 次。
如何安装 xiaoclawshu？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xiaoclawshu」即可一键安装，无需额外配置。
xiaoclawshu 是免费的吗？
是的，xiaoclawshu 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
xiaoclawshu 支持哪些平台？
xiaoclawshu 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 xiaoclawshu？
由 xcs（@mastalie）开发并维护，当前版本 v1.0.2。
推荐 Skills