Crayfish Sticker

根据对话情绪和内容智能匹配并发送多分类表情包，支持河南大叔专属表情和动态远程更新。

Security Scan

The skill's behavior (fetching a remote GitHub-hosted sticker index and returning images matched to conversation sentiment) matches its description and requires no extra credentials or installs.

Purpose & Capability

Name/description claim (auto-matching and sending stickers, dynamic updates) lines up with the SKILL.md. No unexpected credentials, binaries, or system access are requested. The repoUrl in the config points to a raw GitHub URL, which is consistent with 'dynamic remote updates'.

Instruction Scope

Instructions direct the agent to fetch an index.json and images from a remote GitHub repo and cache them locally. This is within the skill's stated scope, but it does mean the skill will make network requests to external content and its behavior can change when the remote repo is updated.

Install Mechanism

No install spec and no code files — instruction-only skill — so nothing will be written to disk by an installer. This is the lowest-risk install model.

Credentials

The skill declares no required environment variables or credentials. That is proportional for a sticker-fetching feature. The only configuration shown is a repoUrl and caching/sending parameters.

Persistence & Privilege

always is false and the skill does not request elevated or persistent system-wide privileges. Autonomous invocation is allowed by default but is not combined with other red flags here.

Scan Findings in Context

[no_code_files_to_scan] expected: The regex scanner had no code files to analyze; this is an instruction-only skill (SKILL.md) that references remote content.

Assessment

This skill fetches an index.json and sticker images from a remote GitHub repository (the repoUrl is hardcoded in the config). Before installing: (1) verify the GitHub repository and its owner (StudyWorkLife) and inspect index.json to ensure it doesn't point to unexpected external domains; (2) be aware that the skill's behavior and content can change whenever the remote repo is updated (dynamic updates); (3) consider whether you want the agent to send stickers automatically — if not, disable autonomous invocation or lower sendFrequency; (4) no secrets are required, but remote images or links could cause network requests that reveal requester metadata (IP) to third parties. If you want stronger assurance, ask the publisher for the repository URL of the actual image files and inspect their contents before enabling the skill.

crayfish-sticker - 智能表情包技能

功能描述

安装后OpenClaw会根据对话上下文的情绪、内容自动匹配合适的表情包发送，让聊天更有意思！表情包资源托管在GitHub仓库，支持实时更新，不需要重新安装技能就能用到新表情。

表情包分类

• 乏/累/颓废 - 日常状态
• 牛逼/厉害 - 称赞专用
• 不中/不行 - 拒绝专用

通用表情

• 开心/快乐 - 高兴时刻
• 无语/无奈 - 吐槽时刻
• 工作/编程 - 干活时刻
• 思考/灵感 - 脑力时刻

实现原理

1. 对话时自动分析当前上下文的情绪、关键词和场景
2. 请求远程表情包仓库的索引文件（JSON格式，标签对应图片链接）
3. 匹配最合适的表情包，返回图片给用户
4. 本地缓存索引和热门表情，请求更快更省流量
5. 智能匹配：优先匹配当前对话的关键词和情绪

表情包仓库结构

表情包单独托管在GitHub仓库，结构如下：

crayfish-stickers/
├── index.json          # 总索引文件（增强版）
├── happy/              # 开心分类
│   ├── laugh1.png
│   └── happy2.png
├── sad/                # 难过分类
│   ├── cry1.png
│   └── upset1.png
├── speechless/         # 无语分类
│   ├── eyeroll1.png
│   └── speechless1.png
├── working/            # 工作分类
│   ├── coding1.png
│   └── debugging1.png
└── thinking/           # 思考分类
    ├── thinking1.png
    └── idea1.png

配置选项

{
  // 表情包仓库URL
  "repoUrl": "https://raw.githubusercontent.com/StudyWorkLife/crayfish-stickers/main/index.json",
  
  // 缓存时间（毫秒）
  "cacheTTL": 3600000,
  
  // 发送频率（0-1，1表示每次都发）
  "sendFrequency": 0.3,
  
}

与crayfish-uncle技能配合

同时安装crayfish-uncle和crayfish-sticker食用更佳

技术细节

• 使用语义分析匹配关键词
• 本地缓存减少网络请求
• 支持动态更新（修改GitHub仓库即可）
• 自动分类和优先级排序