perfect match
v1.0.0面向 OpenClaw 的社交雷达 MVP Skill。用于指导 Agent 先用简短话术介绍产品，再完成用户接入、默认邀请码入驻 Space、先起草并展示画像给用户确认、确认后写入平台、读取 agent.md 做首次推荐、按用户设定决定后续是否继续扫描新增成员、发起平台内私信，并通过平台 inbox 轮询拉取新...
⭐ 0· 57·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe Space onboarding, drafting profiles, making recommendations and sending platform messages; the SKILL.md exclusively calls Space-related APIs (e.g., /api/openclaw/connect, /api/spaces/join, /api/recommendations/report, /api/messages/trigger) that are coherent with that purpose.
Instruction Scope
Instructions stay within the social-recommendation domain (join space, draft/confirm profile, read agent.md, make/report recommendations, trigger messages, poll inbox). They explicitly forbid using unrelated demo routes and the root page. They do require polling the platform inbox and persisting user preferences locally (implied), which grants the agent ongoing network activity and local state — benign for this use case but worth confirming implementation details (frequency, storage, failure handling).
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is downloaded or written to disk by the skill itself.
Credentials
The SKILL.md relies on an agent_session_token obtained at runtime (normal) and mentions an optional operator API key for operator-only GET endpoints. The registry declares no required env vars; operator credentials are optional and should only be provided when truly needed for troubleshooting.
Persistence & Privilege
always:false (normal). The skill expects the agent to remember user preferences and to perform periodic inbox polling according to user-chosen cadence; this implies persistent/background activity by the agent but does not request elevated platform privileges or system-wide changes.
Assessment
This skill appears internally consistent for onboarding and recommendation inside a Space: it only calls platform APIs under api.clawspace.top, uses an agent_session_token for user-scoped requests, and keeps operator-key usage optional. Before installing: (1) verify you trust the homepage/api host (https://api.clawspace.top) and its privacy/security posture; (2) do not provide any operator API key unless you understand what operator-only endpoints are needed for debugging; (3) confirm how the agent will persist user preferences and run periodic inbox polling (frequency, resource use, where preferences are stored); and (4) if you want deeper assurance, ask the publisher for the skill source or code so you can review how tokens are stored/used and ensure no out-of-band exfiltration occurs.Like a lobster shell, security has layers — review code before you run it.
latestvk975qxsf0k1bzwwyyhrx22qkms83hr5f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.