Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

选妃 - 定时推送美女 - 整理美女图片

每日 AI Girl 选妃 - 从指定目录(目录里要有图片)随机选择 3 张 AI 女孩图片,让用户选择一个最喜欢的,自动保存为新头像并记录偏好。使用场景:(1) 每日早晨执行选妃任务,(2) 需要更新 AI 助手形象时,(3) 需要随机选择图片用于展示或测试

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 19 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
SKILL.md metadata declares python3 as a required binary but none of the provided scripts use Python; all scripts are Bash. The skill claims configurable directories (e.g., ~/.openclaw/workspace) but the scripts hard-code absolute paths under /Users/qifengxiang and /Volumes/info/sex/picture/AI girls, tying the skill to a specific user's filesystem rather than the generic paths described.
!
Instruction Scope
Runtime scripts read from /Volumes/info/sex/picture/AI girls, copy files into a user workspace, generate and open an HTML preview, update an avatar file, and overwrite a preferences file — none of these target paths are declared in metadata or exposed as configurable env vars. process-selection.sh maps selections to hard-coded filenames (20250725_002805.jpg, etc.) which contradicts the random-selection behavior and could fail or behave unexpectedly if source contents differ.
Install Mechanism
This is an instruction-only skill with included shell scripts and no install spec or remote downloads. There is no network-based installation or archive extraction, so installation risk is low from a supply-chain perspective.
!
Credentials
Requires no credentials or env vars, but the scripts access and modify local filesystem paths in another user's home and a mounted volume. The metadata does not declare these config paths, so the skill asks implicit filesystem access beyond what's documented. The declared python3 requirement is disproportionate and unexplained.
Persistence & Privilege
The skill writes/overwrites local files (avatar image and a preferences file) under a user's workspace and opens a browser tab. It does not request always:true nor modify other skills. Writing to the local workspace and preferences is expected for this skill, but the use of hard-coded absolute paths increases risk and reduces portability.
What to consider before installing
Do not install or run this skill without review and edits. Specific suggestions: - Inspect and edit the scripts before use: remove hard-coded absolute paths (/Users/qifengxiang, /Volumes/...), replace them with configurable variables (preferably $HOME or env vars the installer can set). - Remove the unnecessary python3 requirement from metadata (it's misleading) or actually use Python if intended. - Fix process-selection.sh so it determines chosen filenames dynamically instead of mapping to hard-coded names (current mapping contradicts the random-selection scripts and may point to stale test data). - Confirm the source directory (/Volumes/...) does not contain sensitive/private images; the skill will read and copy those files and open them in a browser. - If you want to proceed, run the scripts in a sandbox or non-production account first, and change preview/avatar/prefs paths to a directory you control. Prefer adding explicit environment variables or configuration options so the skill doesn't assume another user's home directory.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.1.1
Download zip
latestvk971nde6vp9w6atac5c8as76td83a19z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Binspython3

SKILL.md

选妃 - Daily AI Girl Portrait Selection

功能概述

每日随机从指定目录选择 3 张 AI Girl 图片,让你选择最喜欢的一个作为新头像。适合需要更新 AI 助手形象的场景。

效果展示

预览界面示例

预览界面

说明: 上图展示了选妃任务生成的精美 HTML 预览页面,包含 3 张 AI Girl 图片的卡片式布局。

其他截图

第二张截图

使用方法

基本用法

只需说:

  • "选妃" - 直接执行选妃任务
  • "开始选妃" - 同上

工作流程

  1. /Volumes/info/sex/picture/AI girls/ 目录随机选取 3 张图片
  2. 发送给你展示,并提供清晰的预览
  3. 等待你选择(说"选 1"、"选 2"、"选 3"或文件名)
  4. 自动保存你选择的图片作为新头像
  5. 记录你的偏好到 .learnings/AI-GIRL-PREFERENCES.md
  6. 更新头像文件 ~/.openclaw/workspace/avatars/mimi-today.png

配置路径

  • 图片源目录: /Volumes/info/sex/picture/AI girls/ (可修改)
  • 头像保存位置: ~/.openclaw/workspace/avatars/mimi-today.png
  • 偏好记录文件: .learnings/AI-GIRL-PREFERENCES.md

脚本工具

脚本位于 scripts/ai-girl-selection.sh,支持:

  • ✅ 随机选择 3 张图片
  • ✅ 自动保存到预览目录
  • ✅ 创建精美的 HTML 预览页面
  • ✅ 记录选择偏好
  • ✅ 自动更新头像

示例对话

用户:选妃
Mimi: 🌹 选妃时间 - Daily AI Girl Selection
      随机选取了 3 张 AI Girl 图片,请选一个你喜欢的:
      1. 20250725_002805.jpg
      2. 20250716_000913.jpg
      3. 00004-145824367.png

      告诉我你的选择吧!(直接说 "选 1/2/3") 😏

输出格式

  • 成功: 保存选择,更新头像,记录偏好
  • 错误: 目录不存在、没有图片、选择无效等

注意事项

  • 确保源目录存在且有 JPG/PNG/WebP 图片
  • 选择的图片将保存为 mimi-today.png 作为当日头像
  • 偏好记录包含日期、时间、选择的文件名
  • 支持旋转头像(可根据需要添加)

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…