by 安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only helper for creating feedback/roadmap pages; it does not install code, request credentials, or make surprising external calls, though it will read optional local project-context files if present.
评估建议
This skill is instruction-only and appears to be what it claims: a helper for feedback/roadmap pages. Before installing, consider: (1) It will read optional project-context files (.claude/project-context.md or .cursor/project-context.md) if they exist — if those files contain sensitive information you do not want exposed to skills, remove or redact them. (2) The skill mentions integrations (Canny, FeatureBase, UserVoice) but does not request API keys or perform network calls — any actual integra...详细分析 ▾
ℹ 用途与能力
The skill's name and description align with its instructions: it provides guidance and copy for feedback/roadmap pages and mentions common integrations (Canny, FeatureBase, UserVoice). One small inconsistency: the metadata declares no required config paths, but the SKILL.md explicitly tells the agent to read .claude/project-context.md or .cursor/project-context.md if present. Reading local project-context files is reasonable for this purpose but the metadata omission is worth noting.
ℹ 指令范围
SKILL.md is focused and stays on-task (page structure, copy, integration notes, SEO). The only runtime file access it requests is to read optional project-context files in the repository (.claude/... or .cursor/...). This is coherent with the goal but is a concrete action that will surface local project information; the instructions do not direct reading of unrelated system files, environment variables, or external endpoints.
✓ 安装机制
There is no install spec and no code files — the skill is instruction-only. That is the lowest-risk install model and matches the skill's described function.
✓ 凭证需求
The skill requires no environment variables, no credentials, and no config paths in its metadata. It mentions third-party services (Canny, FeatureBase, UserVoice) but does not request API keys or instruct automatic integration. The absence of credential requests is proportionate to an authoring/advisory skill.
✓ 持久化与权限
always is false and the skill is user-invocable; autonomous invocation is enabled by default (normal platform behavior). The skill does not request persistent privileges or modify other skills. Combined with no credentials and no installs, there is no concerning persistence or privilege escalation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/24
Batch: disclosure through tiktok-ads
● 无害
安装命令 点击复制
官方npx clawhub@latest install feedback-page-generator
镜像加速npx clawhub@latest install feedback-page-generator --registry https://cn.clawhub-mirror.com
技能文档
Guides feedback and roadmap pages that collect user input and communicate product direction. Often integrates with Canny, FeatureBase, UserVoice, or similar. Supports product-led growth and community engagement.
When invoking: On first use, if helpful, open with 1–2 sentences on what this skill covers and why it matters, then provide the main output. On subsequent use or when the user asks to skip, go directly to the main output.
Initial Assessment
Check for project context first: If .claude/project-context.md or .cursor/project-context.md exists, read it for product and roadmap priorities.
Identify:
- Tool: Canny, FeatureBase, UserVoice, custom, or embedded form
- Scope: Feedback only, roadmap only, or both
- Primary goal: Collect requests, show transparency, build community
- Audience: Users, prospects, or both
Page Structure
| Section | Purpose |
|---|---|
| Headline | "Share Your Ideas" or "Product Roadmap" |
| Value | We listen; your input shapes the product |
| Feedback | Form or embed; categories (feature, bug, other) |
| Roadmap | In progress, planned, completed; or link to external board |
| Process | How we prioritize; what happens after you submit |
| CTA | Submit idea, vote, view roadmap |
Best Practices
Feedback Collection
- Low friction: Few fields; optional details
- Categories: Feature request, Bug, General
- Duplicate detection: "Similar ideas" to merge votes
Roadmap Display
- Status: In progress, planned, completed
- Transparency: Don't over-promise; "Exploring" vs "Committed"
- Update regularly: Stale roadmap hurts trust
Integration
- Embed: Canny, FeatureBase embed on your domain
- Or link: /feedback → feedback.yourproduct.com
- SEO: Often noindex for external boards; index if on your site
Output Format
- Headline and value proposition
- Page structure (feedback + roadmap sections)
- Process copy (how we use feedback)
- Integration notes (Canny, etc.)
- SEO (index vs noindex)
Related Skills
- docs-page-generator: Feedback process in docs
- contact-page-generator: Alternative for simple feedback
- changelog-page-generator: Completed roadmap items → changelog
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制