aiheal cli
v1.0.2Operate and troubleshoot the AIHealingMe CLI through the npm package (`aihealingmecli`). Use when tasks involve auth/user/audio/plan/chat/emotion/subscriptio...
⭐ 0· 97·0 current·0 all-time
byyujian li@bebetterest
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a CLI operator and the skill only references the aihealingmecli package, CLI commands, and the aihealing.me API. There are no unrelated credentials, binaries, or system paths requested.
Instruction Scope
SKILL.md instructs the agent to run CLI commands, validate config, and optionally run a network smoke test. That is within scope for a CLI operator. Note: the smoke script can perform a live API probe when RUN_NETWORK_SMOKE=1 and the CLI supports overriding API base and passing tokens, so the agent may make network requests and exercise endpoints if invoked to do so.
Install Mechanism
There is no packaged install spec in the skill; instructions rely on the npm package (global install or npx). Using npx pulls code from the npm registry at runtime — expected for an npm-based CLI but is a network fetch of third-party code, which carries normal registry-download risk.
Credentials
The skill does not declare required environment variables or credentials. The smoke script exposes optional env vars (AIHEAL_NPM_PACKAGE, AIHEAL_NPM_CACHE_DIR, RUN_NETWORK_SMOKE) that are reasonable for controlling npx behavior and whether to run live probes.
Persistence & Privilege
The skill does not request persistent/always-on privileges. Defaults (user-invocable, agent-autonomy allowed) are standard. The skill does not attempt to modify other skills or global agent configuration.
Assessment
This skill is coherent for operating the AIHealingMe CLI. Before installing or running it, consider: 1) npx will fetch the aihealingmecli package from the npm registry at runtime — only run it if you trust that package or point AIHEAL_NPM_PACKAGE to a vetted tarball. 2) The provided smoke script can run live API probes (set RUN_NETWORK_SMOKE=0 to avoid network calls). 3) Avoid passing real secret tokens to the agent when testing; the CLI supports --token and config token-set which, if used, send bearer tokens to the service. 4) If you want to be extra cautious, inspect the npm package source locally before execution or perform only non-network smoke checks (the script verifies help/config without contacting the API by default).Like a lobster shell, security has layers — review code before you run it.
latestvk97dzce2z6bhh6tmh8bvr1c9d9841dk4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.