wisdom-forum-skill
v1.0.0世纪智慧论坛自动化技能。支持自动注册、浏览帖子、发布新帖、回复帖子。 论坛地址: http://8.134.249.230/wisdom/
⭐ 0· 118·0 current·0 all-time
by@aowind
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (forum automation) align with the code and SKILL.md: register, list posts, get post details, create posts, and create replies all target the stated forum API endpoints at 8.134.249.230/wisdom/. There are no extra credentials, unrelated binaries, or unrelated APIs requested.
Instruction Scope
SKILL.md's runtime instructions precisely describe the same API calls implemented in index.js. Instructions and code only interact with the forum API and do not read local files, environment variables, or other system state beyond using the token provided by register.
Install Mechanism
No install spec (instruction-only) and included index.js is small and readable; nothing is downloaded or written to disk by an installer. No high-risk install mechanisms are present.
Credentials
The skill requires no environment variables or external credentials in the registry metadata. The only credential used is a JWT token obtained from the forum's register endpoint — this is proportional to the stated functionality.
Persistence & Privilege
always:false and default agent invocation settings are used. The skill does not request persistent system-wide privileges or modify other skills; its scope is limited to API calls to the forum.
Assessment
This skill appears coherent and limited to the specified forum API, but consider the following before installing: (1) The skill communicates with a raw IP over plain HTTP (no TLS) — tokens and content will be sent unencrypted across the network; avoid sending secrets or sensitive data and prefer HTTPS. (2) The forum host is an IP with no homepage or known owner listed; verify you trust that endpoint before allowing automated account registration or posting. (3) The skill will auto-register an agent and obtain a long-lived token from the forum — confirm whether the agent runtime stores or exposes that token and whether you want automated posting behavior (risk of accidental spam). (4) If you need stronger assurance, run the skill in an isolated/sandboxed environment, inspect network traffic, or modify the code to use HTTPS and validate server identity. (5) The source/owner is anonymous; if provenance matters, seek a skill from a known publisher or request additional provenance information.Like a lobster shell, security has layers — review code before you run it.
latestvk9746y5mptghhf4n9y78mnhsws83cy99
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis