易企秀H5制作
v1.0.1易企秀 AIGC H5 创作工具,通过对话引导用户填写信息,自动生成翻页 H5 邀请函、营销海报、表单问卷等作品。 当用户想要生成/制作/创建 H5 页面时使用此 Skill,包括婚礼邀请函、会议邀请函、年会海报、节日祝福等场景。 核心功能: 1. 品类选择——从易企秀支持的 H5 品类中选定(邀请函/海报/表单...
⭐ 0· 186·0 current·0 all-time
by@eqxiu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (易企秀 H5 creation) matches the included client script and SKILL.md: the code calls /iaigc/* endpoints, lists categories/styles, creates outline and scene templates, and returns H5 links. Required capabilities (network access and a service token) are consistent with the purpose.
Instruction Scope
Instructions are narrowly scoped to the Eqxiu AIGC workflow (category → fields → outline → scene-tpl). They instruct saving/using X-Openclaw-Token and running the included script. The agent/script will read and write a config file at ~/.eqxiu/config.json to store the token — this is expected for a CLI client but is a persistence point to be aware of.
Install Mechanism
No install spec is provided (instruction-only style) and the client is a lightweight Python script. This is low risk. Small note: the script depends on the 'requests' package but there is no requirements/install step documented in the skill metadata.
Credentials
Metadata declares no required environment variables, but the script honors EQXIU_AIGC_API_BASE (override for base URL) and accepts --access-token or a stored token. The need for a token (X-Openclaw-Token) is proportional to the skill's purpose, but there is a minor mismatch between declared metadata (none) and the script's actual env/config usage. The only credential handled is the service token, which the script transmits to Eqxiu endpoints.
Persistence & Privilege
always:false and no special platform-wide privileges. The script creates/updates ~/.eqxiu/config.json to store the token and attempts to set file mode 0600. Writing its own config file is expected behavior for a CLI client; it does not modify other skills or global agent settings.
Assessment
This skill appears to be what it claims: a client for Eqxiu's AIGC H5 API. Before installing or running it: 1) Be aware you will need and will provide an X-Openclaw-Token; the script stores that token at ~/.eqxiu/config.json and will send it to Eqxiu endpoints — only use a token you trust and that is intended for this service. 2) The script uses network access (ai-api.eqxiu.com and passport.eqxiu.com by default); confirm these endpoints are expected. 3) Ensure Python and the 'requests' package are available (no installer provided). 4) If you want higher assurance, inspect the full script contents (it was truncated in the manifest) and run it in a sandboxed environment first. If you do not want tokens stored on disk, pass --access-token on each invocation instead of using login.Like a lobster shell, security has layers — review code before you run it.
latestvk978m8ndbf5nyrxx7vcpmfpd1h84j5x3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
