技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 331 · 3 current installs · 3 all-time installs
⭐ 0
安装量（当前） 3
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：aiwithabidi/discord-bot
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill claims to be a zero-dependency Discord API CLI and mostly matches that, but the implementation contains multiple inconsistencies (wrong API paths/methods, incorrect Authorization header) and it reads an undeclared .env file path — these discrepancies suggest the skill is buggy or sloppy and should be reviewed before use.
目的
The skill name/description (Discord bot management) aligns with the code’s intent (HTTP calls to discord.com). However the actual HTTP paths and methods in the script are incorrect/implausible for the real Discord REST API (e.g., using endpoints like /guild/get, /channel/create, /message/edit instead of Discord’s documented endpoints), and the script uses Authorization: Bearer <token> while Discord bot tokens require the Authorization: Bot <to…
说明范围
SKILL.md states 'never stores data locally' and declares only DISCORD_BOT_TOKEN as required, but the runtime script attempts to read an .env file from a workspace path (constructed from WORKSPACE or ~/.openclaw/workspace/.env) if the environment variable is absent. Reading files from the user home/workspace is outside what the skill declares and is unexpected scope creep. The SKILL.md instructions do not mention this fallback behavior.
安装机制
This is instruction-only with an included Python script and no install spec — nothing is automatically downloaded or written to disk by an installer. Risk from install mechanism itself is low.
证书
The declared required credential (DISCORD_BOT_TOKEN) is appropriate. However the script also reads a WORKSPACE environment variable (not declared) to form a path to an .env file in the user's home (~/.openclaw/workspace/.env), which could access other secrets or files. The undocumented file-read fallback is disproportionate and should be disclosed or removed.
持久
The skill does not request permanent presence (always is false) and does not modify other skills or system-wide settings. No elevated persistence privileges are requested.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Discord Bot」。简介：Discord Bot API integration — manage servers, channels, messages, roles, member…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aiwithabidi/discord-bot/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。