collab-offer-polisher
v1.0.0把合作邀约、商务私信、品牌合作需求和合作条款草稿,改写成更专业、更容易推进合作的版本。
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (polish collaboration offers) align with required binaries (node + pbpaste) and the included script which reads clipboard text for rewriting. The dependency on pbpaste is consistent with the README noting macOS.
Instruction Scope
Runtime instructions tell the agent to run scripts/read_clipboard.mjs which executes pbpaste and prints the clipboard contents surrounded by markers. This is within scope for a text-polishing skill but has a privacy implication: it will expose whatever is currently on the user's clipboard to the agent.
Install Mechanism
No install spec (instruction-only plus a small included script). No downloads or archive extraction; nothing is written to disk beyond the existing skill files. Low-risk installation footprint.
Credentials
No environment variables, credentials, or config paths requested. The lack of extraneous secrets is proportionate to the described functionality.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated privileges and does not modify other skills or system-wide settings.
Assessment
This skill is coherent with its stated purpose and contains a small script that reads the macOS clipboard and prints it for the agent to rewrite. Before using it: (1) ensure you're on macOS (pbpaste required); (2) do not put secrets or sensitive personal data in the clipboard when invoking the skill, because the clipboard contents will be sent to the agent for rewriting; (3) you can inspect scripts/read_clipboard.mjs (already included) — it uses only pbpaste and does not make network calls or access other files; (4) if you need cross-platform support, request an alternative that uses a different clipboard method. If any of these points are a concern, do not install or invoke the skill.scripts/read_clipboard.mjs:5
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🤝 Clawdis
Binsnode, pbpaste
latest
Collab Offer Polisher
这是一个合作邀约与商务沟通优化 skill。
主要用途
适用于:
- 品牌合作邀约
- 场地方合作
- 摄影合作
- 达人邀约
- 甲乙方初次接洽
- 商务私信
- 简版合作方案
- 活动合作说明
调用方式
当用户说:
- 读取剪贴板并帮我润色合作邀约
- 帮我把这段商务私信改专业一点
- 用更容易成交的方式重写这段合作话术
- 帮我做一个更有礼貌但更清晰的合作文案
你应运行:
node {baseDir}/scripts/read_clipboard.mjs
Comments
Loading comments...
