Zsxq Shared

知识星球 CLI 共享基础：认证登录（auth login/logout）、查看认证状态、诊断配置。当用户需要首次登录、退出登录、查看认证状态、或遇到认证错误时触发。

This skill appears to be a straightforward CLI auth helper, but take these precautions before installing: 1) Verify the zsxq-cli binary comes from a trusted source (the skill gives no homepage/source). 2) Confirm the registry metadata is corrected (SKILL.md requires zsxq-cli but the registry entry omitted it). 3) Be aware the skill claims tokens are permanently stored in your system Keychain — prefer short‑lived tokens or ensure you can revoke them. 4) Do not allow the agent to perform writes (post/delete) without explicit confirmation; the SKILL.md mentions confirming writes, enforce that. 5) If possible, run login locally yourself rather than letting the agent run background auth, and ask the skill author/maintainer for source code or a homepage to establish provenance. If you need higher assurance, request the skill be updated to document how to obtain zsxq-cli, token lifetime and revocation, and add a source repository or homepage.

Type: OpenClaw Skill Name: zsxq-shared Version: 0.1.0 The skill bundle provides standard instructions for an AI agent to manage authentication and API interactions for the 'zsxq-cli' tool (Knowledge Planet). It utilizes a legitimate OAuth 2.0 device flow for login and includes explicit security rules in SKILL.md to protect user tokens and ensure confirmation before destructive actions. No indicators of data exfiltration, malicious execution, or harmful prompt injection were identified.