技能详情（站内镜像，无评论）
作者：LL @aileaile
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.2.0
统计：⭐ 0 · 115 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：aileaile/claw-pet
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and runtime instructions match its stated purpose (calling a remote catch API) but the registry metadata does not declare the required environment variables (CATCH_API_URL and API_KEY), which is an inconsistent omission you should understand before installing.
目的
Name/description (remote 'catch' action) aligns with the script and SKILL.md: the skill makes a POST to a configured backend and parses pet/item/empty/error responses. However the registry metadata lists no required env vars or primary credential while the runtime requires CATCH_API_URL and API_KEY. That metadata omission is inconsistent.
说明范围
SKILL.md and the script narrowly instruct the agent to load config from environment or _meta.json, POST {'action':'catch'}, parse JSON response, and format results. The instructions do not request unrelated files, system credentials, or contact external endpoints beyond the configured CATCH_API_URL.
安装机制
No install spec; instruction-only with a small included Python script. Nothing is downloaded or installed automatically, so there is low installation risk.
证书
The skill legitimately needs two configuration values (CATCH_API_URL and API_KEY) to operate, which is proportionate. The concern is that the registry metadata does not declare these required env vars or a primary credential, creating a mismatch that could confuse users and lead to misconfiguration or accidentally checked-in secrets. The script also reads a local _meta.json (packaged with the skill) as a fallback, which could cause developers …
持久
always:false and no unusual persistence or cross-skill configuration changes. The skill can be invoked autonomously by the agent (platform default), which increases blast radius if a malicious backend were configured, but that is normal behavior and not by itself a red flag here.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「claw-pet」。简介：Catch a pet or loot item by calling a configured remote pet backend API. Use wh…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aileaile/claw-pet/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。