技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 92 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：2239721014-ops/research-web-publisher
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's instructions push files to GitHub and operate on a specific local output folder but the package declares no required binaries or credentials and also demands automatic triggering—these mismatches could cause unexpected filesystem/git operations or require access to GitHub credentials that aren't disclosed.
目的
The declared purpose (publish research HTML to GitHub and produce a domestic preview link) matches the textual instructions. However the SKILL.md explicitly requires running git operations and operating on a specific local output directory, yet the skill metadata lists no required binaries (git) and no credentials. The SKILL.md also hardcodes a GitHub repo (2239721014-ops/ai-hardwork-report) and a local path (~/.openclaw/.../workplace-doc/), w…
说明范围
Instructions instruct the agent to read source file paths, write HTML into a specific output directory, run git add/commit/push in a repo path, and generate CDN/preview links. The SKILL.md also mandates automatic triggering on many keywords. These runtime steps imply access to the user's filesystem and Git remotes and the ability to push to repositories, but the skill gives no guidance about confirming user consent before pushing or how to aut…
安装机制
This is an instruction-only skill with no install spec and no code files, so there is nothing written to disk by an installer—this is low risk from an installation perspective.
证书
No environment variables or credentials are declared, yet git push to GitHub will typically require credentials (SSH keys, GITHUB_TOKEN, or username/password). The mismatch between required runtime capabilities and declared credentials is disproportionate and unexplained. Also the default remote repo is third-party-looking and not justified.
持久
While the skill metadata does not set always:true, the SKILL.md explicitly requires the skill be automatically triggered on many user keywords. Allowing autonomous invocation combined with instructions to modify local files and push commits increases risk of unintended or repeated filesystem and network actions. The skill does not instruct to always request explicit user confirmation before pushing.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「research-web-publisher」。简介：将调研报告内容发布为图文并茂的HTML网页，推送至GitHub并生成国内可访问的预览链接，实现完整发布流程。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/2239721014-ops/research-web-publisher/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。