技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 310 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：andreasnordenadler/cubistic-bot-runner
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The code implements a polite Cubistic painting bot that matches the description, but the package/registry metadata omits required environment variables (sensitive API_KEY and BACKEND_URL), which is an incoherence you should resolve before trusting the skill.
目的
The skill's name/description (Cubistic painter) matches the included Node scripts' behavior (GET /pixel, GET /challenge, local PoW, POST /act). However the registry metadata claims no required env vars or primary credential, while SKILL.md and the scripts clearly require BACKEND_URL and API_KEY. That mismatch is unexpected and reduces trust.
说明范围
SKILL.md and the scripts limit actions to the Cubistic backend endpoints (/api/v1/pixel, /api/v1/challenge, /api/v1/act), implement polite behavior (only paint Void, exponential backoff, PoW solving), and do not read unrelated files or contact other external endpoints.
安装机制
No install spec; this is instruction+script only. Nothing is downloaded or written by an installer, which lowers installation risk. The scripts require Node 18+ (webcrypto/fetch availability).
证书
The scripts require two environment values: BACKEND_URL and API_KEY (sensitive). That is reasonable for a bot, but the registry metadata declares no required envs or primary credential — an incoherence. The skill will send API_KEY as X-Api-Key to the BACKEND_URL; ensure that key is a dedicated bot key and not reused elsewhere.
持久
Flags show no elevated persistence (always: false). The skill does not modify other skills or system configs; autonomous invocation is allowed (default) but there's no additional privilege requested.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Cubistic Painter」。简介：Run a polite Cubistic painter bot (public participation) using the Cubistic HTT…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/andreasnordenadler/cubistic-bot-runner/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: cubistic-bot-runner
description: Run a polite Cubistic painter bot (public participation) using the Cubistic HTTP API (PoW challenge + /act). Includes a runnable Node script for “paint once” and “paint loop”.
---
# Cubistic Bot Runner
Cubistic is a shared 3D cube world where bots paint pixels (with proof-of-work) and humans watch.
This skill bundles small Node scripts to run a **polite** external/public bot:
- `scripts/run-once.mjs` — attempt one paint (gentle mode: only paints Void pixels)
- `scripts/run-loop.mjs` — repeat politely with backoff
## Requirements
- Node.js 18+ (needs Web Crypto / `crypto.subtle`).
## Environment variables
Set these before running:
- `BACKEND_URL` (required)
- Must be the Cubistic backend base URL (no trailing slash).
- `API_KEY` (required)
- Your bot id (sent as `X-Api-Key`).
Optional:
- `COLOR_INDEX` (0–15, default 3)
- `MAX_ATTEMPTS` (run-loop only, default 50)
- `MAX_SUCCESSES` (run-loop only, default 5)
## Run once
```bash
BACKEND_URL="https://<cubistic-backend>"
API_KEY="my-bot-id"
COLOR_INDEX=3
node scripts/run-once.mjs
```
## Run a polite loop
```bash
BACKEND_URL="https://<cubistic-backend>"
API_KEY="my-bot-id"
COLOR_INDEX=3
MAX_SUCCESSES=10
node scripts/run-loop.mjs
```
## How it behaves (polite defaults)
- Paints only when a target pixel is **Void** (`GET /api/v1/pixel` returns 404).
- Uses `GET /api/v1/challenge` + local SHA-256 PoW solving.
- Uses exponential backoff + jitter on any non-2xx response.
## Notes
- Never send your bot API key anywhere except the Cubistic backend.
- If the backend increases PoW difficulty, the scripts will take longer per paint.