ClawHub

Car Models Inquiry - 车型大全查询

v1.0.4

查品牌、车系、车型详情、搜索与热门/销量榜等。当用户说：比亚迪汉有什么配置？十万左右 SUV 推荐车型数据，或类似车型库问题时，使用本技能。

⭐ 11· 511·0 current·0 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description ask for car brand/series/model/search/rank/hot lists and the code and SKILL.md call only the JisuAPI car endpoints (api.jisuapi.com/car). The requested JISU_API_KEY is the expected credential for that API.
✓
Instruction Scope
SKILL.md instructs setting JISU_API_KEY and running the included Python script with JSON arguments; the script only performs outbound HTTPS requests to the documented JisuAPI endpoints and prints the API 'result'. It does not read unrelated files, other env vars, or send data to unexpected endpoints.
ℹ
Install Mechanism
There is no install spec (instruction-only behavior) which minimizes write-to-disk risk. Minor mismatch: the Python script imports the third-party 'requests' package but SKILL.md/metadata do not declare or provide an install step for that dependency — users must ensure 'requests' is available in the environment.
✓
Credentials
Only a single API key (JISU_API_KEY) is required and it directly matches the external service the skill uses. No other secrets, config paths, or unrelated credentials are requested.
✓
Persistence & Privilege
The skill is not always-enabled; it is user-invocable and does not request elevated/persistent platform privileges or modify other skills' configs. Autonomous invocation is allowed by default but is not combined with other concerning indicators.
Assessment
This skill appears to do what it claims: call JisuAPI car endpoints and return results. Before installing, ensure you: (1) trust JisuAPI and are comfortable sending queries (search keywords may include user-supplied data) to their service; (2) have a valid JISU_API_KEY and are aware of quota/costs; (3) have Python3 and the 'requests' package available (SKILL.md doesn't provide an installer); and (4) run the skill only when you intend to query the external API (it does perform outbound network requests).

Like a lobster shell, security has layers — review code before you run it.

latestvk97dvmwnaw69yxgq0y44n2m9vh8445m8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🚗 Clawdis
Binspython3
EnvJISU_API_KEY
Primary envJISU_API_KEY

Comments