技能详情（站内镜像，无评论）
作者：傅洋 @4ier
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 66 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：4ier/claw-use
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's instructions line up with a device-control protocol, but important metadata and safety details are missing or contradictory (notably authentication handling and unlock behavior), so its requirements and scope don't fully add up.
目的
The SKILL.md describes a coherent device-control protocol (HTTP API, cu CLI, endpoints for screen, tap, screenshot, TTS, etc.), which matches the skill name and description. However, the doc requires token-based auth (X-Bridge-Token) yet the registry metadata declares no required credentials or primaryEnv. That omission is notable: a real integration would usually declare how tokens are supplied.
说明范围
Runtime instructions permit reading UI trees, screenshots, notifications, and performing input/launch actions — all expected for device control but high-impact. SKILL.md also contains a contradiction: Device State says 'unlock (PIN required for unlock)' but Tips state 'Auto-unlock is transparent: locked devices auto-unlock before any command.' That discrepancy affects security assumptions (automatic unlocking vs requiring PIN). The instruction…
安装机制
This is instruction-only with no install spec or bundled code, which is low-risk from a supply chain perspective. The skill expects the 'cu' CLI to be installed but doesn't provide an install mechanism — acceptable but the absence of an official install source or guidance in metadata reduces transparency.
证书
The protocol requires token auth via X-Bridge-Token per the docs, but the registry metadata lists no required environment variables or primary credential. The skill also suggests optional Tailscale use for remote access (which would require separate credentials/config). Requesting no declared credentials while describing token-based auth is inconsistent and leaves unclear how secrets are expected to be supplied or stored.
持久
always:false (no forced persistence). The skill can be invoked autonomously by the agent (platform default). Given this skill allows remote control of physical devices (taps, unlocks, app launches, screenshots), autonomous invocation increases risk; consider restricting autonomous use or requiring explicit user approval for commands that affect devices or capture content.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Claw Use — Device Control for AI Agents」。简介：Control physical devices over HTTP with unified commands for screen reading, in…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/4ier/claw-use/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。