技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.1
统计：⭐ 3 · 1.6k · 1 current installs · 1 all-time installs
⭐ 3
安装量（当前） 1
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：sansfiction-library
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's stated purpose (manage a SansFiction library) mostly matches its instructions, but there are important inconsistencies and an insecure token-handling recommendation that you should understand before installing.
目的
The skill's name/description (SansFiction library manager) aligns with using a SansFiction personal token and calling the service's MCP endpoint. However, the runtime instructions assume use of the OpenClaw CLI (openclaw cron add) without listing that CLI as a required binary — a minor coherence gap. Overall capabilities requested are plausible for the described feature set.
说明范围
The SKILL.md instructs the agent to have the user paste the SANSFICTION_TOKEN 'once' into chat and then persist it into ~/.openclaw/openclaw.json or env vars. This is contradictory and risky: asking the user to paste a secret into chat exposes it to chat logs and platform storage. The document also contains a hard rule 'Never echo the token back or write it into chat logs' which conflicts with the 'paste in this chat' step — the conflict is a …
安装机制
This is an instruction-only skill with no install spec and no code files, which minimizes install-time risk. It requires the 'curl' binary (declared). No remote downloads or extracted archives are present.
证书
The skill uses a single primary credential (SANSFICTION_TOKEN), which is appropriate for an API-based library manager. That token is justified by the described read/write operations. Caveat: the SKILL.md's suggested token handling (paste into chat then persist to ~/.openclaw/openclaw.json) increases exposure risk compared with using a secure secret store; also the metadata lists curl as a required binary but the instructions rely on the OpenCl…
持久
The skill is not marked always:true (good). It can be invoked autonomously (disable-model-invocation:false), which is the platform default; combined with the ability to schedule a cron job, the skill can cause recurring agent actions (daily check-in). This is reasonable for a reminder feature but increases the impact if the skill were misused, so be cautious about granting it persistent token access.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Library」。简介：Authorized SansFiction library manager. Adds books to your library, updates rea…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/fgbytes/sansfiction-library/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。