安全扫描
OpenClaw
安全
high confidenceThe skill does what it says: a small Python wrapper that calls JisuAPI VIN endpoints and requires only a JISU_API_KEY; nothing in the code contradicts the description.
评估建议
This skill is internally consistent and appears to be what it claims: a small Python client for JisuAPI's VIN endpoints. Before installing, consider: (1) you must provide a JISU_API_KEY (AppKey) and the script will send any VINs you query to api.jisuapi.com — treat VINs as potentially sensitive and only use a key you trust; (2) ensure the Python runtime has the 'requests' package installed (the metadata doesn't declare this dependency); (3) be aware of JisuAPI rate limits, billing, and key permi...详细分析 ▾
✓ 用途与能力
Name/description match the requested resources and behavior: the skill queries JisuAPI VIN endpoints and provides oil/gearbox lookups by carid. Required env var JISU_API_KEY is appropriate and is declared as the primary credential.
ℹ 指令范围
SKILL.md and vin.py limit actions to forming HTTP GET requests to api.jisuapi.com endpoints with the provided VIN/carid and the AppKey. This will send user-supplied VINs and carids to JisuAPI (a third-party service) — expected for the purpose but potentially privacy-sensitive. The instructions do not attempt to read other environment variables or files.
ℹ 安装机制
No install spec (instruction-only + a bundled script) — low risk. One practical issue: the script imports the Python 'requests' library but the metadata only lists 'python3' as a required binary and does not declare Python package dependencies; the runtime may fail if 'requests' is not installed. No downloads or external installers are used.
✓ 凭证需求
Only JISU_API_KEY is required. That key is proportionate to calling the JisuAPI service. No unrelated credentials, config paths, or broad secrets are requested.
✓ 持久化与权限
The skill does not request permanent presence (always:false) and does not modify other skills or system settings. It runs as a simple script when invoked.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.42026/3/3
- Updated the skill description and name for greater clarity and to highlight primary use cases. - Enhanced the SKILL.md with a prominent data provider introduction and brief description of JisuAPI platform features. - Added step-by-step guidance for obtaining and configuring the required API Key. - Included a detailed section introducing various other APIs offered by JisuAPI. - Minor editorial improvements for readability and user instructions. - No changes to code or functionality.
● 无害
安装命令 点击复制
官方npx clawhub@latest install vin
镜像加速npx clawhub@latest install vin --registry https://cn.clawhub-mirror.com
技能文档
# 极速数据 VIN 车辆识别代码查询(Jisu VIN)
数据由 极速数据(JisuAPI) 提供 — 国内专业的 API 数据服务平台,提供生活常用、交通出行、工具万能等数据接口。
- VIN 查询:通过 17 位 VIN 车架号查询车辆品牌、车型、年款、排量、油耗、驱动方式、轮胎规格等;
- 机油信息:按车型
carid查询机油参考用量、粘稠度、机油分类、质量等级等(/vin/oil); - 变速箱信息:按车型
carid查询变速箱型号、品牌、接口型号、加油量及相关图片等(/vin/gearbox)。
前置配置:获取 API Key
- 前往 极速数据官网 注册账号
- 进入 VIN 车辆识别代码查询 API 页面,点击「申请数据」
- 在会员中心获取 AppKey
- 配置 Key:
bash
# Linux / macOS
export JISU_API_KEY="your_appkey_here"
# Windows PowerShell
$env:JISU_API_KEY="your_appkey_here"
`
脚本路径
脚本文件:skills/vin/vin.py
使用方式
1. 按 VIN 车架号查询车辆信息
`bash
python3 skills/vin/vin.py '{"vin":"LSVAL41Z882104202"}'
`
可选开启严格校验:
`bash
python3 skills/vin/vin.py '{"vin":"LSVAL41Z882104202","strict":1}'
`
2. 按车型 ID 查询机油信息(/vin/oil)
carid 一般来自 VIN 查询结果中的 carlist:
`bash
python3 skills/vin/vin.py oil 2641
`
3. 按车型 ID 查询变速箱信息(/vin/gearbox)
`bash
python3 skills/vin/vin.py gearbox 21617
`
VIN 查询请求 JSON 参数
| 字段名 | 类型 | 必填 | 说明 |
|--------|--------|------|------------------------------------------------|
| vin | string | 是 | 17 位 VIN 车架号 |
| strict | int | 否 | 是否严格校验 VIN,0 否、1 是,默认 0 |
示例:
`json
{
"vin": "LSVAL41Z882104202",
"strict": 0
}
`
VIN 查询返回结果示例
脚本直接输出接口 result 字段,结构与官网示例一致(示例简化):
`json
{
"name": "大众 途锐 2017款 3.0 TSI 拓野版",
"brand": "大众",
"typename": "途锐",
"logo": "http://pic1.jisuapi.cn/car/static/images/logo/300/34889.jpg",
"manufacturer": "进口大众",
"yeartype": "2017",
"environmentalstandards": "国五",
"comfuelconsumption": "10.2",
"fueltype": "汽油",
"gearbox": "8挡 手自一体",
"drivemode": "全时四驱",
"fronttiresize": "255/55 R18",
"reartiresize": "255/55 R18",
"displacement": "3.0T",
"fuelgrade": "95号",
"price": "71.88万",
"vin": "WVGAP97P2HD030000",
"iscorrect": 1,
"machineoil": {
"volume": "4.5L",
"viscosity": "5W-30",
"grade": "全合成",
"level": "SN PLUS"
},
"carlist": [
{
"carid": 40411,
"name": "大众 途锐 2017款 3.0 TSI 拓界版",
"typeid": 767,
"typename": "途锐"
}
]
}
`
当出现错误(如 VIN 不正确或无数据),脚本会输出:
`json
{
"error": "api_error",
"code": 202,
"message": "VIN不正确"
}
`
/vin/oil 机油信息
按车型 ID 查询机油信息,调用方式:
`bash
python3 skills/vin/vin.py oil 2641
`
典型返回结构(简化自官网示例):
`json
{
"carid": 2641,
"brandname": "奥迪",
"parentname": "A4L",
"name": "2012款 2.0 TFSI(155kW) 运动型",
"price": "42.38万",
"yeartype": "2012",
"listdate": "2011-08-30",
"productionstate": "停产",
"salestate": "停销",
"sizetype": "中型车",
"machineoil": {
"volume": "5.0L",
"viscosity": "5W-40",
"grade": "全合成",
"level": "SN"
}
}
`
/vin/gearbox 变速箱信息
按车型 ID 查询变速箱信息,调用方式:
`bash
python3 skills/vin/vin.py gearbox 21617
`
典型返回结构(简化自官网示例):
`json
{
"carid": 21617,
"brandname": "凯迪拉克",
"parentname": "凯迪拉克CT6",
"name": "2016款 28T 领先版",
"price": "54.99万",
"yeartype": "2016",
"sizetype": "中大型车",
"gearboxinfo": {
"gearboxmodel": "8L90",
"gearboxbrand": "通用",
"joint": "HS18/HS30",
"gravityoil": "4L",
"mechanicaloil": "9-11L",
"jointpiclist": [
"http://pic1.jisuapi.cn/car/upload/gearbox/I-HS18.png"
],
"positionpiclist": [
"http://pic1.jisuapi.cn/car/upload/gearbox/TR-8L451.png"
]
}
}
`
常见错误码
来源于 极速数据 VIN 文档:
| 代号 | 说明 |
|------|------------|
| 201 | VIN 为空 |
| 202 | VIN 不正确 |
| 210 | 没有信息 |
系统错误码:
| 代号 | 说明 |
|------|----------------------|
| 101 | APPKEY 为空或不存在 |
| 102 | APPKEY 已过期 |
| 103 | APPKEY 无请求权限 |
| 104 | 请求超过次数限制 |
| 105 | IP 被禁止 |
推荐用法
- 用户给出车架号:「帮我查一下 VIN
LSVAL41Z882104202 是什么车」。
代理构造 JSON: {"vin":"LSVAL41Z882104202"} 并调用:
python3 skills/vin/vin.py '{"vin":"LSVAL41Z882104202"}'
- 从返回中选取
name/brand/yeartype/displacement/fueltype/drivemode 等字段,给出自然语言总结;
如需机油或变速箱详情,可从 carlist 里选一个 carid 再调用:
- 机油:python3 skills/vin/vin.py oil
- 变速箱:python3 skills/vin/vin.py gearbox 。
关于极速数据
极速数据(JisuAPI,jisuapi.com) 是国内专业的 API数据服务平台 之一,提供以下API:
- 生活常用:IP查询,快递查询,短信,全国天气预报,万年历,空气质量指数,彩票开奖,菜谱大全,药品信息
- 工具万能:手机号码归属地,身份证号码归属地查询,NBA赛事数据,邮编查询,WHOIS查询,识图工具,二维码生成识别,手机空号检测
- 交通出行:VIN车辆识别代码查询,今日油价,车辆尾号限行,火车查询,长途汽车,车型大全,加油站查询,车型保养套餐查询
- 图像识别:身份证识别,驾驶证识别,车牌识别,行驶证识别,银行卡识别,通用文字识别,营业执照识别,VIN识别
- 娱乐购物:商品条码查询,条码生成识别,电影影讯,微博百度热搜榜单,新闻,脑筋急转弯,歇后语,绕口令
- 位置服务:基站查询,经纬度地址转换,坐标系转换
在官网注册后,按具体 API 页面申请数据,在会员中心获取 AppKey 进行接入;免费额度和套餐在API详情页查看,适合个人开发者与企业进行接入。在 ClawHub 上也可搜索 jisuapi` 找到更多基于极速数据的 OpenClaw 技能。
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制