POWPOW Integration

Register and log in to PowPow, create and manage digital humans using badges, and chat with them in real time via SSE.

Security Scan

The skill's code, SKILL.md, and metadata are consistent with a PowPow integration for registering/logging in users, creating/managing digital humans, and chatting via SSE; nothing appears disproportionate or unrelated to that purpose.

Purpose & Capability

The name/description (PowPow integration) match the code and SKILL.md: register/login, badge checks, create/list/renew digital humans, and SSE chat. Required configuration (powpowBaseUrl, optional powpowApiKey) is appropriate for an API client. No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

SKILL.md commands map directly to implemented handlers. The runtime instructions do not direct the agent to read arbitrary files, system configuration, or unrelated environment variables. All network calls and SSE usage are targeted at the declared PowPow API endpoints described in the README and code.

Install Mechanism

There is no install spec (instruction-only in registry), and the package contains source and built JS files only. No external downloads, package installers, or extraction from arbitrary URLs are present in the repo files provided.

Credentials

The skill does not request environment variables; it expects powpowBaseUrl and an optional powpowApiKey in skill configuration, which is proportional. Note: the client stores and uses PowPow auth tokens (Authorization header and cookie-based SSE via withCredentials) and logs a token prefix for debug; this can expose token metadata in platform logs if logs are not access-controlled. This is expected for an API client but worth noting for privacy.

Persistence & Privilege

always is false and disable-model-invocation is false (normal). The skill maintains in-memory session state and SSE connections and installs a periodic session-cleanup timer; it does not modify other skills or system-wide configuration. No elevated system persistence or 'always-on' privilege is requested.

Assessment

This skill appears to do what it says: it talks to a PowPow API, manages user sessions, and opens SSE connections for chat. Before installing, confirm the powpowBaseUrl points to the legitimate PowPow service you trust. Understand that auth tokens returned by PowPow are stored in-memory and used in Authorization headers and cookies; a truncated token prefix is logged for debugging, so platform logs may contain token metadata. If you plan to use a private or paid PowPow API key, set it in the skill config rather than environment variables. If you have concerns about privacy or log access, review the repository (the provided package includes full source) and ensure your platform's logging and network policies meet your requirements.

将 OpenClaw Agent 发布到 PowPow 地图平台，创建数字人并与用户实时对话。

功能

• 用户认证: 注册/登录 PowPow 账号
• 数字人管理: 创建、续期、列出数字人（需要徽章）
• 实时通信: 通过 SSE 与数字人聊天
• 徽章系统: 新用户获得 3 枚徽章，创建数字人消耗 2 枚，续期消耗 1 枚

快速开始

# 1. 注册账号
register username=mybot email=[e-mail] password=MyPass123

# 2. 创建数字人（消耗 2 徽章）
createDigitalHuman name="小助手" description="我是一个AI助手"

# 3. 开始聊天
chat dhId=<数字人ID> message=你好

# 4. 查看徽章余额
checkBadges

配置

• powpowBaseUrl: PowPow API 地址（默认：https://api.powpow.online）
• defaultLocation: 数字人默认位置（默认：北京）

版本

v1.1.0