← 返回 Skills 市场
151
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install zizo
功能描述
Search images and boards in zizo library. Use when user asks to search for images, photos, pictures, visual assets, or boards/collections.
安全使用建议
Before installing or enabling this skill:
- Note the metadata mismatch: the package metadata claims no required env vars, but the SKILL.md and code require ZIZO_TOKEN. Treat this as a red flag and ask the publisher to fix metadata.
- If you proceed, only provide a token with the minimal possible privileges. Verify what that token can access on https://zizo.pro (scopes, revocation).
- Confirm you trust the owner: there is no homepage and the source is "unknown." Prefer skills with a verifiable publisher and homepage.
- The bundled code is readable and only POSTs to the ZIZO_SERVER /mcp endpoint over HTTPS and formats results; it does not access other local files or external endpoints. That reduces risk, but the token is sensitive — don’t reuse high-privilege tokens.
- If you need higher assurance, request the publisher to correct the registry metadata and provide a source/homepage or reproducible build steps so you can audit the package before use.
功能分析
Type: OpenClaw Skill
Name: zizo
Version: 1.0.4
The 'zizo' skill is a standard API client for searching images and boards on the Zizo platform (zizo.pro). The code in `dist/index.js` implements a JSON-RPC interface over HTTPS, correctly handling authentication via the `ZIZO_TOKEN` environment variable and enforcing secure connections. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in `SKILL.md` or the source code.
能力评估
Purpose & Capability
The skill's stated purpose (search images/boards on zizo.pro) matches the included code and instructions: the CLI calls the zizo MCP API. However the registry metadata (top-level summary) says "Required env vars: none" and "Primary credential: none" while both SKILL.md and dist/index.js require a ZIZO_TOKEN (and optionally ZIZO_SERVER). That metadata/code mismatch is incoherent and should be corrected.
Instruction Scope
SKILL.md confines runtime actions to reading environment variables and invoking the bundled Node CLI (node dist/index.js) to POST JSON-RPC requests to the zizo server. It does not instruct the agent to read unrelated files, other credentials, or exfiltrate data to third-party hosts. Instructions to obtain a token point to zizo.pro. Behavior described is limited to the stated purpose.
Install Mechanism
There is no install spec (instruction-only), and a pre-built dist/index.js is included in the package. No external downloads, shell installers, or unusual extraction steps are present. The runtime uses only Node's built-in https module. This is a low-risk install footprint.
Credentials
The code and SKILL.md require ZIZO_TOKEN (and optional ZIZO_SERVER, ZIZO_LIMIT, ZIZO_SCOPE). Requiring a single API token is proportionate to the skill's purpose. The problem is that the registry metadata incorrectly lists no required environment variables and no primary credential, creating a mismatch in what the skill claims to need vs what it actually needs at runtime.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and has no persistent installation actions described. It runs as an on-demand CLI and has normal, limited privilege.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zizo - 安装完成后，直接呼叫该 Skill 的名称或使用
/zizo触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.4
- Added ZIZO_TOKEN to the credentials section in SKILL.md to clarify it is required for authentication.
- No other functionality or documentation changes detected.
v1.0.3
- Added structured environment variable definitions to the SKILL.md for improved clarity.
- Credentials and environment variable sections now use explicit schema fields.
- No code or tool changes; documentation update only.
v1.0.2
- Simplified configuration: now only environment variables are supported, config file is no longer used.
- Documentation updated to remove config file setup and related instructions.
- Clear note added that configuration is read exclusively from environment variables.
v1.0.1
zizo 1.0.1
- Added detailed configuration instructions for obtaining and setting up the API token.
- Clarified usage of environment variables versus config file, including their priority.
- Expanded documentation on searching for images and boards using zizo-cli.
- Provided usage examples and outlined all supported command-line arguments.
- Included a table summarizing relevant environment variables and their defaults.
元数据
常见问题
skill for searching images and boards in zizo library (https://zizo.pro). 是什么？
Search images and boards in zizo library. Use when user asks to search for images, photos, pictures, visual assets, or boards/collections. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 151 次。
如何安装 skill for searching images and boards in zizo library (https://zizo.pro).？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zizo」即可一键安装，无需额外配置。
skill for searching images and boards in zizo library (https://zizo.pro). 是免费的吗？
是的，skill for searching images and boards in zizo library (https://zizo.pro). 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
skill for searching images and boards in zizo library (https://zizo.pro). 支持哪些平台？
skill for searching images and boards in zizo library (https://zizo.pro). 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 skill for searching images and boards in zizo library (https://zizo.pro).？
由 foobar（@foobarhe）开发并维护，当前版本 v1.0.4。
推荐 Skills