Amber Electric 的实时电价、预测电价及站点信息
v1.0.1Access real-time electricity prices, forecasts, and site details from Amber Electric. Supports fetching current price data, 24-hour forecasts, and account si...
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md handler calls Amber Electric endpoints and requires an AMBER_API_KEY, which is coherent with the skill name and description. However, the registry metadata lists no required env vars or primary credential, and _meta.json and registry metadata show inconsistent version/publish data. The missing declaration of AMBER_API_KEY in the manifest is an incoherence.
Instruction Scope
The runtime instructions are narrowly scoped to three actions (get_sites, get_current_price, get_forecast) and only reference Amber API endpoints and the AMBER_API_KEY environment variable. The code does not reference unrelated files, other env vars, or external endpoints besides api.amber.com.au.
Install Mechanism
There is no install specification and no code files beyond SKILL.md and _meta.json. As an instruction-only skill, it does not write artifacts to disk or download external installers.
Credentials
The handler requires an AMBER_API_KEY (process.env.AMBER_API_KEY) to function, but the skill's declared requirements list no environment variables and no primary credential. That omission is disproportionate/unexplained. Requesting a single Amber API key for this purpose would be reasonable, but the manifest should declare it explicitly.
Persistence & Privilege
always is false and the skill does not request system-wide configuration or modify other skills. It has normal, limited runtime privileges.
What to consider before installing
This skill appears to implement exactly the Amber Electric API calls described, but the published metadata fails to declare the AMBER_API_KEY it needs and has a small version/metadata mismatch. Before installing, request that the publisher update the manifest to explicitly declare AMBER_API_KEY (and set primaryEnv if appropriate), provide a homepage or source for verification, and explain the version discrepancy. Only supply an Amber API token you control — prefer a limited-scope token if Amber supports it — and avoid reusing high-privilege credentials. If you can't verify the publisher/source, treat the skill as untrusted.Like a lobster shell, security has layers — review code before you run it.
amber utilitylatest
Amber Electric Energy Assistant | 能源助手
This skill enables OpenClaw to access wholesale electricity price data from Amber Electric (Australia). 此技能允许 OpenClaw 接入澳洲 Amber Electric 的批发电价数据。
Key Features / 主要功能
- View Sites / 查看站点: Retrieve the NMI and Site ID(s). 获取你名下的 NMI 和站点 ID。
- Real-time Pricing / 实时价格: Get current price levels (e.g.,
extremelyLow,spike). 获取当前电价等级和具体数值。 - Price Forecasting / 电价预测: View 24-hour price trends. 获取未来 24 小时的价格趋势。
Configuration / 配置要求
需要在环境变量或 openclaw.json 中配置:
AMBER_API_KEY: Your personal Amber API token. 你的 Amber API 令牌。
Comments
Loading comments...
