Sign-Off
v1.1.0在每次完整输出后追加个性化落款签名。像对讲机的 Over,让用户明确知道 AI 说完了。Use when completing any response or after tool calls return results.
⭐ 0· 97·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (append a signature) matches the delivered artifacts: SKILL.md describes reading a sign-off.json and templates/, and render.js plus template files implement variable rendering. No unrelated binaries, credentials, or config paths are requested.
Instruction Scope
Runtime instructions constrain the skill to reading sign-off.json in the workspace and rendering templates; render.js only reads local files and prints the rendered signature. SKILL.md mentions optional weather API usage as a possibility, but the included code does not call external APIs. The skill also describes updating sign-off.json via conversational commands — that implies the agent (or user) may write to a file in the workspace when configured to do so.
Install Mechanism
No install spec; this is instruction-only with source files bundled. There are no external downloads, package installs, or extract steps. package.json exists but has no dependencies; render.js is local and has no network calls.
Credentials
The skill requires no environment variables or credentials. The only environment read by the code is OPENCLAW_WORKSPACE (optional) to locate the workspace root — this is proportional to locating sign-off.json.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. However, its operation expects access to the workspace root (reading sign-off.json and templates) and SKILL.md suggests updating sign-off.json via conversation — so installing/using it may result in writes to your workspace config if you accept or issue those changes.
Assessment
This skill appears coherent and low-risk, but review a few things before installing:
- Inspect sign-off.json (workspace root) and templates so you know what will be read and what a rendered signature might contain.
- Be aware that telling the agent to "change your signature" implies writing to sign-off.json in your workspace; grant write access only if you trust the agent and the skill.
- The included render.js reads local files only and does not call external services; if you (or a future change to the skill) add a weather API or other network calls, review those endpoints and any required API keys.
- If installing from the suggested Git repo, verify the repository source/author (git clone URL in README) if provenance matters to you.
No credentials or special system privileges are requested by the skill as provided.Like a lobster shell, security has layers — review code before you run it.
latestvk979my8a4c790d9hw7xawtmq1n83mk8g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
