技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.8
统计：⭐ 0 · 140 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：9starmax/cny-rate-calculator
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's stated purpose (fetch CNY rates and notify channels) roughly matches its code, but the runtime instructions ask the agent to scan and modify OpenClaw configuration, write cron jobs, and use credential environment variables that are not declared in the registry metadata — this mismatch and the automatic messaging/scheduling behavior are concerning and merit manual review before installing.
目的
Name/description (fetch Bank of Taiwan rates, calculate tiered prices, send on schedule) align with included code and instructions. However the registry metadata declares no required env vars or config access, while SKILL.md and the script require/expect TELEGRA M_BOT_TOKEN / OPENCLAW_GATEWAY_* and direct access to OpenClaw config paths and cron. The missing declaration of those credentials/config access is an inconsistency.
说明范围
SKILL.md instructs the agent to proactively scan OpenClaw configuration files, prompt users via already-enabled channels, send test messages, and (on setup) write schedule entries to ~/.openclaw/cron/jobs.json. Those actions go beyond a passive 'fetch-and-report' helper: they read system config, send outbound messages autonomously, and modify scheduler state. Automatic prompting/sending on agent startup and test-message behavior could result i…
安装机制
No external install steps or downloads are declared (instruction-only with bundled scripts). There is no installer that fetches arbitrary code at install time, which reduces supply-chain risk compared with remote downloads.
证书
The skill metadata lists no required env vars, but SKILL.md references TELEGRAM_BOT_TOKEN and OPENCLAW_GATEWAY_{TOKEN,URL}. The included script inspects multiple OpenClaw config paths that may contain other skills' tokens/config; reading those files can expose unrelated credentials. Requesting gateway tokens for multiple messaging backends is plausible for this skill, but the lack of metadata declarations and the broad config scanning are disp…
持久
The skill writes cron entries to ~/.openclaw/cron/jobs.json to schedule itself and instructs the agent to perform checks on startup and to auto-trigger setup flows — this gives it persistent, recurring execution and the ability to send messages over time. Although always:true is not set, the skill can still install a persistent scheduled job that runs independently; users should be aware and consent.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Cny Skill Extracted」。简介：Fetch Bank of Taiwan CNY exchange rates and calculate tiered prices with discou…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/9starmax/cny-rate-calculator/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。