ClawHub

Bic Qa - 佰晟问答

v1.0.2

当用户询问数据库或操作系统相关知识、需要基于 BIC-QA 知识库检索专业资料时使用。调用官方 API 需要有效凭据，详见正文 Setup

⭐ 0· 117·0 current·0 all-time
by@bbsyd2
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill is a thin wrapper for the BIC‑QA HTTP API and only needs an API key to query database/OS knowledge — this matches the name/description. Minor discrepancy: registry metadata lists no required env vars, while SKILL.md instructs the agent/user to supply BIC_API_KEY or ~/.bic/config/api_key.
✓
Instruction Scope
SKILL.md confines operations to reading a single local config path or env var and issuing POST requests to https://api.bic-qa.com/skills/qa. It instructs verifying the API key and handling specific HTTP responses; it does not ask the agent to read unrelated files, transmit data to other domains, or perform unrelated system actions.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. No downloads or archive extraction are performed.
ℹ
Credentials
The skill requires a single service-specific API key (BIC_API_KEY or ~/.bic/config/api_key), which is proportionate. The registry did not declare this env/config requirement, which is a metadata mismatch the user should be aware of.
✓
Persistence & Privilege
always:false and no actions that modify other skills or system-wide settings. The skill does not request persistent elevated presence.
Assessment
This skill appears coherent and limited: it only needs a BIC‑QA API key and will POST queries to api.bic-qa.com. Before installing, confirm you trust https://www.bic-qa.com and its API, and store the key securely (use the recommended file with tight permissions or an environment variable). Note the registry metadata omitted the env/config requirement — make sure you provide BIC_API_KEY or ~/.bic/config/api_key as instructed. Do not share the API key publicly, and rotate it if you suspect leakage. If you need higher assurance, verify network requests from the agent are restricted to api.bic-qa.com and review any agent-level logging to ensure keys are not being recorded elsewhere.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fy5t6vqeyp4d3yakqqnfb5d83p9v6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments