← 返回 Skills 市场
Zyt credentials guard
作者
zuoyuting214
· GitHub ↗
· v0.5.0
· MIT-0
183
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install zyt-credentials-guard
功能描述
Guide users to configure local Chanjing credentials safely via local commands only, and validate local token status when needed.
安全使用建议
This skill appears to be a documentation-only helper for managing local Chanjing credentials and is internally consistent. Before installing/using it, consider: 1) It will read and may write ~/.chanjing/credentials.json (or $CHANJING_CONFIG_DIR); only use if you are comfortable the agent can access that file. 2) Verify the token endpoint domain (https://open-api.chanjing.cc) matches the official Chanjing service you trust. 3) The package references helper scripts and an openapi yaml that are not included — if you later install a variant that adds scripts, inspect them before running. 4) Never paste AK/SK into chat; if you accidentally do, rotate keys. If you want the agent to never access local files, do not enable this skill or avoid granting filesystem access.
功能分析
Type: OpenClaw Skill
Name: zyt-credentials-guard
Version: 0.5.0
The skill is a security-conscious credential manager for the Chanjing API. It explicitly instructs the AI agent to avoid requesting or echoing secrets (AK/SK) within the chat interface, instead guiding the user to manage them in a local configuration file (~/.chanjing/credentials.json). The logic involves opening a legitimate login URL (chanjing.cc) and performing local token refreshes via the official API endpoint, with no evidence of data exfiltration or malicious execution.
能力评估
Purpose & Capability
The name/description say it's a local guide for Chanjing credentials and the instructions only require reading/writing a local credentials.json and calling the Chanjing token endpoint. Requesting CHANJING_CONFIG_DIR to locate the config file is appropriate for this purpose.
Instruction Scope
The SKILL.md instructs the agent to read/write ~/.chanjing/credentials.json (or $CHANJING_CONFIG_DIR/credentials.json), open the Chanjing login page in the browser, and POST to https://open-api.chanjing.cc/open/v1/access_token to refresh tokens. Those actions match the stated scope. Minor inconsistency: the docs/reference mention a helper script path ('scripts/chanjing-config' and functions like read_config()) and a chanjing-openapi.yaml that are not included in the package — this is documentation-only and not dangerous, but it is an inconsistency to note.
Install Mechanism
No install spec and no code files — instruction-only skill. Low risk from installation because nothing is downloaded or written by an installer.
Credentials
The skill declares only CHANJING_CONFIG_DIR which is reasonable to locate the local credentials. The reference mentions CHANJING_API_BASE as a possible env var but it is not declared in requires.env; this is a minor documentation inconsistency but not an over-broad credential request. The skill does not request unrelated secrets or cloud credentials.
Persistence & Privilege
always:false and no install hooks; the skill does not request persistent/privileged presence. It does instruct reading and writing a local credential file (expected for its function) but does not attempt to modify other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install zyt-credentials-guard - 安装完成后,直接呼叫该 Skill 的名称或使用
/zyt-credentials-guard触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.5.0
Initial publish.
v0.4.0
Initial publish.
v0.3.0
Initial publish.
v0.2.0
Initial publish.
v0.1.0
Initial publish.
元数据
常见问题
Zyt credentials guard 是什么?
Guide users to configure local Chanjing credentials safely via local commands only, and validate local token status when needed. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 183 次。
如何安装 Zyt credentials guard?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zyt-credentials-guard」即可一键安装,无需额外配置。
Zyt credentials guard 是免费的吗?
是的,Zyt credentials guard 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Zyt credentials guard 支持哪些平台?
Zyt credentials guard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Zyt credentials guard?
由 zuoyuting214(@zuoyuting214)开发并维护,当前版本 v0.5.0。
推荐 Skills