技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 3.8k · 18 current installs · 18 all-time installs
⭐ 0
安装量（当前） 18
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：adinvadim/2captcha
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's behavior largely matches its stated purpose (CLI wrapper for 2Captcha) but there are inconsistencies and install risks you should understand before installing.
目的
The SKILL.md and README consistently describe a CLI client for the 2Captcha service (image, reCAPTCHA, hCaptcha, Turnstile, etc.), which matches the skill name/description. However the registry metadata declares no required credentials or config paths, while the instructions clearly require a 2Captcha API key (TWOCAPTCHA_API_KEY or ~/.config/2captcha/api-key). That mismatch between declared requirements and runtime instructions is a discrepancy.
说明范围
The runtime instructions tell the user/agent to download a script from raw.githubusercontent.com into /usr/local/bin and to read/store API key in ~/.config/2captcha/api-key or TWOCAPTCHA_API_KEY. The SKILL.md expects reading the user's config/env for the API key (not declared in metadata). The instructions also include example JS for injecting tokens into web pages (expected for automation). There are no instructions that obviously exfiltrate …
安装机制
Installation is a one-line curl from raw GitHub to /usr/local/bin and chmod +x. Downloading and installing a remote script into a system path is higher-risk than an instruction-only skill: it writes executable code on disk and may require elevated privileges. The source (raw.githubusercontent.com) is a common host but still represents executing remote code; the skill metadata contains no install spec or checksum to verify authenticity.
证书
Functionality legitimately requires a 2Captcha API key and a local config file or env var, but the skill metadata did not declare any required credentials or primaryEnv. That omission could mislead users/agents about what secrets are necessary. Beyond the API key, no unrelated credentials are requested, so the scope of secrets is limited — the issue is the missing declaration and the skill reading a user config path.
持久
The skill does not set always:true and does not request broad platform privileges, which is good. However the provided install steps create an executable at /usr/local/bin and a config file under ~/.config/2captcha — both are persistent changes to the system. Installing a remote script into a system-wide bin is a privilege-sensitive operation and should be done with caution (inspect the script, avoid running as root blindly).
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「2Captcha CLI」。简介：Solve CAPTCHAs using 2Captcha service via CLI. Use for bypassing captchas durin…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/adinvadim/2captcha/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。