掌眼小助理
v1.0.0专注文物、书画、瓷器、玉器与古董收藏领域的智能鉴定助手,帮助用户进行初步分析、风险识别、收藏建议与鉴定思路讲解。
⭐ 0· 59·0 current·0 all-time
by@aojax
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (antique appraisal assistant) matches the included references, templates, prompts, and Python scripts that generate checklists, risk prompts, formatted responses, and simple keyword risk flags. One minor mismatch: manifest.json declares 'image_based_precheck' capability, but the included scripts do not perform any image processing — they only inspect text/user descriptions and generate prompts asking users to upload photos. This is plausibly intentional (the agent/host may handle images), but it's a capability/implementation note rather than a security red flag.
Instruction Scope
SKILL.md/system_prompt guide the agent to ask for images and metadata, to stay within appraisal boundaries, and to refuse being a formal/official appraisal. Runtime scripts operate on user text (keyword checks, checklist generation, response formatting) and do not attempt to read arbitrary system files, environment variables, or external endpoints.
Install Mechanism
This is instruction‑first with no install spec and no external downloads. No brew/npm/remote archives or installers are declared — lowest risk for install-time execution of arbitrary code. The package contains local Python scripts only.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The functionality described (asking for photos and user-provided metadata, applying checklists and heuristics) does not require secrets or privileged access.
Persistence & Privilege
always is false and the skill does not request persistent system presence or modify other skills. It contains only its own scripts and knowledge files; autonomous invocation is the platform default and not a unique elevation here.
Assessment
What to consider before installing:
- Function: The skill is internally consistent for giving preliminary, image‑based antique/collectible advice and includes thorough templates, prompts, and simple Python utilities; it explicitly disclaims official or judicial authentication.
- No secrets needed: it asks for no credentials or environment variables.
- Image handling: although the manifest lists an 'image_based_precheck' capability, the shipped scripts do not process image files — they only inspect text/keywords and prompt the user to supply photos. If you expect automated image analysis, confirm how images will be handled (by the platform, by a separate tool, or not at all).
- Privacy & risk: the skill’s workflow asks users to upload photos of objects; do not share sensitive provenance documents or high‑resolution images you don't want stored publicly. The skill is for preliminary, not authoritative, conclusions — for high‑value transactions always get an in‑person or institutional appraisal.
- Source origin: the Source/Homepage are unknown. While the code here is readable and contains no networking/exfiltration, consider running it in a sandbox or reviewing the scripts yourself before deploying in a sensitive environment.
- Minor implementation notes: the scripts use simple keyword matching and may misclassify or miss context; they are utility helpers rather than robust NLP/image‑analysis modules.
If you need, I can: (a) summarize exact places the skill will prompt users for images/data, (b) point out any lines in the scripts you'd like explained, or (c) suggest security checks to run before enabling the skill (e.g., run the Python files in a restricted environment to confirm no outbound network activity).Like a lobster shell, security has layers — review code before you run it.
antiquevk975bgvrtnggyttpg2zv8jynzd83y6whappraisalvk975bgvrtnggyttpg2zv8jynzd83y6whartvk975bgvrtnggyttpg2zv8jynzd83y6whchinesevk975bgvrtnggyttpg2zv8jynzd83y6whlatestvk975bgvrtnggyttpg2zv8jynzd83y6wh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏺︎ Clawdis
