← 返回 Skills 市场
88
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install zenquote
功能描述
Daily inspirational quotes from ZenQuotes.io. Get daily wisdom, random quotes, quote images. Supports automated daily delivery via cron scheduling.
安全使用建议
This skill appears to do exactly what it says: fetch quotes from ZenQuotes.io and optionally schedule daily sends. Before installing or running setup: 1) ensure curl and jq are available; 2) inspect ~/.openclaw/skills/zenquote/scripts/zenquote.sh and the cron JSON written to ~/.openclaw/cron to confirm schedule, timezone (Asia/Taipei), and target channel/accountId; 3) provide only trusted chat_id/accountId values (it does not itself request Telegram tokens—delivery uses your OpenClaw account configuration); and 4) if you don't want persistent cron jobs, avoid the 'setup' command and run commands manually.
功能分析
Type: OpenClaw Skill
Name: zenquote
Version: 1.0.7
The skill provides inspirational quotes from ZenQuotes.io but contains a vulnerability in the `setup` command within `scripts/zenquote.sh`. The script constructs a JSON configuration file for a cron job by directly embedding user-provided parameters (`chat_id` and `account_id`) without sanitization. This allows for JSON injection and persistent prompt injection, which could enable an attacker to manipulate the AI agent's behavior when the scheduled task executes in the future.
能力评估
Purpose & Capability
Name/description match the implementation: scripts call https://zenquotes.io/ endpoints and provide today/random/quotes/image/setup features. Declared dependencies (curl, jq) are reasonable and used by the scripts.
Instruction Scope
SKILL.md instructs running the included shell script and to send image outputs using the message tool; the runtime script also writes a cron job JSON into ~/.openclaw/cron to schedule daily deliveries. That file contains delivery metadata (telegram channel, chat_id, accountId) and a hardcoded cron expression/timezone. These actions are within the stated feature set but are persistent operations you should expect (they create files and schedule deliveries).
Install Mechanism
No install spec; the skill is instruction-only with included shell scripts. Nothing is downloaded or extracted from untrusted URLs during install.
Credentials
The skill does not request environment variables or credentials. It uses HOME and an optional ZENQUOTE_CONFIG env var to locate its config, and accepts an account_id parameter for delivery. No unexpected secrets or unrelated service credentials are requested.
Persistence & Privilege
The skill does create persistent files: ~/.openclaw/skills/zenquote/config.json and cron entries under ~/.openclaw/cron/*.json to enable scheduled deliveries. It does not set always:true and does not modify other skills' configs, but you should review the cron JSON it writes (channel/accountId/to fields) before enabling scheduling.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zenquote - 安装完成后，直接呼叫该 Skill 的名称或使用
/zenquote触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
Replace hardcoded chat ID with placeholder in examples
v1.0.6
Update setup command to support both text and image daily delivery
v1.0.5
Clarify image command: no additional text should be added
v1.0.4
Update output format: cleaner minimal style with markdown attribution link
v1.0.3
Update image command to download and return local file path for direct sending
v1.0.2
Fix suspicious warnings: add dependencies declaration and clean up unused config
v1.0.1
Add attribution requirement docs and update output format
v1.0.0
Initial release: Daily inspirational quotes from ZenQuotes.io
元数据
常见问题
ZenQuote 是什么？
Daily inspirational quotes from ZenQuotes.io. Get daily wisdom, random quotes, quote images. Supports automated daily delivery via cron scheduling. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 88 次。
如何安装 ZenQuote？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zenquote」即可一键安装，无需额外配置。
ZenQuote 是免费的吗？
是的，ZenQuote 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ZenQuote 支持哪些平台？
ZenQuote 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ZenQuote？
由 Chris Lo（@chrisluo5311）开发并维护，当前版本 v1.0.7。
推荐 Skills