MaxClaw Helper
v1.1.0Usage guidance and runtime diagnostics for MaxClaw / OpenClaw. Activate when: (1) User asks how to use a feature — e.g. 'how to enable Feishu long polling',...
⭐ 0· 298·0 current·0 all-time
byKris@krisliu16
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is a usage and diagnostics helper for MaxClaw/OpenClaw and its instructions focus on querying documentation (OpenClaw docs and a MaxClaw Feishu Wiki), classifying runtime failures, and escalating to community if needed. The referenced sources (OpenClaw docs and MaxClaw Feishu Wiki) are appropriate for the stated purpose.
Instruction Scope
SKILL.md contains explicit flows for doc lookup, failure classification, and escalation. It tells the agent to query documentation and ask the user for config / error messages when needed. It references reading config like openclaw.json only to decide to stop or do safety checks (i.e., it does not instruct blanket reading/exfiltration). One small caveat: the Feishu Wiki flow shows steps that involve obtaining an obj_token and reading a document via feishu-wiki/feishu-doc actions — this behavior is expected for a MaxClaw helper but does implicitly rely on platform-provided access to Feishu; the skill itself does not instruct collecting unrelated secrets or sending data to unexpected endpoints.
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes disk writes and arbitrary code execution risk.
Credentials
The skill declares no required env vars, credentials, or config paths, which is proportional. However, the trusted-sources instructions include steps for accessing a Feishu Wiki (obj_token/doc_token). Those steps imply the agent/platform must have some Feishu access mechanism; the skill does not request explicit credentials itself. This is likely acceptable if the platform exposes feishu-wiki/feishu-doc capabilities, but you should verify how Feishu access is provisioned and whether any tokens could be used.
Persistence & Privilege
always:false and no install behavior means the skill has no special persistent presence or elevated privileges. It does not modify other skills or system-wide settings in its instructions.
Assessment
This skill appears coherent and low-risk because it is instruction-only, asks for no credentials, and points to official docs. Before installing, consider: (1) Confirm how your agent/platform provides access to the Feishu Wiki (feishu-wiki/feishu-doc) and ensure any Feishu tokens are managed by the platform (not embedded in the skill). (2) If you are uncomfortable with an agent running CLI commands (e.g., openclaw --version) or reading local config during troubleshooting, restrict the agent's execution permissions. (3) Remember the skill may return guidance that is 'MaxClaw users only' — verify applicability if you run a non-MaxClaw OpenClaw deployment. (4) Because it's instruction-only, there is no install footprint, but verify that the agent will not be allowed to autonomously execute high-risk operations without your confirmation.Like a lobster shell, security has layers — review code before you run it.
latestvk971wfbmznzs5b6efb2gysh88d82hnmj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.