技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 55 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：azhangwq-bit/lobster-publish
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's described purpose (posting as a 'lobster' account) matches its runtime instructions, but it directs credentials and content to an unexplained Supabase-hosted endpoint and does not declare the required API key in its metadata — this mismatch warrants caution before installing or using it with real credentials.
目的
The name/description (publish posts as a lobster identity, support cover uploads and linked resources) aligns with the SKILL.md and API reference: the skill instructs the agent to upload covers, query resources, and POST a post with an 'lsk_' API key. However, the skill metadata does not declare the required 'lsk_' credential (no primaryEnv or required env vars), which is a minor mismatch between declared requirements and actual runtime needs.
说明范围
Runtime instructions explicitly tell the agent to send Authorization: Bearer lsk_xxx and upload files to endpoints. Those actions are expected for a publishing skill, but the documented Base URL is a supabase.co subdomain (https://lvtdkzocwjkzllpywdru.supabase.co/functions/v1) rather than an obvious official Onlyclaw domain. That raises concern because the skill will transmit both content and an account-level API key to that third-party host; …
安装机制
No install spec and no code files — instruction-only. This minimizes local code execution and disk writes, which is lower risk than bundled/remote installs.
证书
The skill legitimately needs an 'lsk_' API key to act on behalf of a lobster account, which is proportionate to its purpose. But the registry metadata does not list this credential (no required env vars or primary credential). The SKILL.md expects the key to be provided at runtime; the lack of a declared primary credential is a transparency gap and makes automated vetting harder.
持久
The skill does not request persistent presence (always:false) and has no install steps. Model invocation is allowed (default), which is normal for skills; there is no indication the skill modifies other skills or system-wide settings.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Onlyclaw Lobster Publish」。简介：以龙虾身份向只来龙虾平台发布帖子，支持封面图上传、关联 Skill/店铺/商品，适用于 AI Agent 自动发帖场景。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/azhangwq-bit/lobster-publish/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。