by 安全扫描
OpenClaw
可疑
medium confidenceThe skill largely matches its stated purpose (routing between a local Ollama host and free cloud LLM endpoints), but there are coding and metadata inconsistencies (a malformed Cloudflare URL, a declared 'curl' binary that the code never uses, missing Python dependency declarations) that make it unreliable and warrant caution before installing and running with real credentials.
评估建议
This skill appears to implement what it claims (use local Ollama first, then Cloudflare or Groq as fallbacks), but there are sloppy/incoherent parts you should address before trusting it with real API keys: (1) The metadata declares 'curl' but the script uses Python's requests — install the requests package (pip install requests) or update the skill metadata; (2) call_cloudflare() contains a malformed f-string/URL and will fail — inspect and fix the Cloudflare endpoint before supplying CF creden...详细分析 ▾
ℹ 用途与能力
The skill's name/description (local Ollama + free cloud fallbacks) align with the included script and SKILL.md. The primaryEnv OLLAMA_HOST is appropriate. However, registry metadata requires the 'curl' binary while the Python script uses the 'requests' library (no use of curl anywhere) and no Python dependencies are declared—this is an incoherence between declared requirements and actual implementation.
⚠ 指令范围
SKILL.md instructs exactly what the script does (set OLLAMA_HOST, optional CF/GROQ tokens, run the Python script). The script only calls the listed providers. It does not attempt to read unrelated system files or exfiltrate arbitrary data. However, the call_cloudflare() implementation contains a syntax/URL bug (f-string uses {account_id/ai/run/... which is invalid and will produce a runtime error), so Cloudflare calls will fail or be malformed. The code prints errors to stderr but would not silently exfiltrate secrets; still, providing real API tokens would cause them to be transmitted to external provider endpoints (as intended) — be cautious.
✓ 安装机制
No install spec is provided (instruction-only plus bundled script), so the skill does not download or install third-party binaries during installation. This is lower risk. Note: the repository/script expects Python and the 'requests' package, but no dependency management (requirements.txt) or install steps are declared.
ℹ 凭证需求
Requesting OLLAMA_HOST as the primary credential is proportionate to the stated purpose. The script also optionally reads CF_ACCOUNT_ID, CF_API_TOKEN, and GROQ_API_KEY to call external providers—these are relevant but are not listed as 'required' in the registry metadata (they are optional). Users should understand that providing those tokens will send them to the respective external APIs. No unrelated credentials are requested.
✓ 持久化与权限
The skill does not request always: true, does not persist configuration across other skills, and does not modify system-wide settings. It runs as an on-demand script and has no elevated persistence or privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/20
Free AI Bot 1.0.0 - Initial release offering a free AI aggregator that integrates local Ollama models and various cloud-based free AI APIs (Cloudflare Workers AI, Groq, Kimi). - Features intelligent routing and failover to select the optimal, zero-cost AI resource automatically. - Supports both local and cloud AI models, with command line invocation and easy environment configuration. - Provides clear troubleshooting steps and encourages community contributions.
● 无害
安装命令 点击复制
官方npx clawhub@latest install free-ai-bot
镜像加速npx clawhub@latest install free-ai-bot --registry https://cn.clawhub-mirror.com
技能文档
免费 AI 聚合器 - 让 AI 零成本运行
核心理念
免费 ≠ 廉价
- 本地模型 + 免费 API = 零成本运行
- 智能路由 = 始终选择最优方案
- 故障转移 = 一个不行换一个
支持的资源
🏠 本地模型 (完全免费)
| 模型 | 特点 | 适用场景 |
|---|---|---|
| llama3.2 | 轻量快速 | 日常对话 |
| qwen2.5 | 中文优化 | 中文任务 |
| phi3.5 | 微软出品 | 推理任务 |
☁️ 免费云端 API
| 服务 | 免费额度 | 特点 |
|---|---|---|
| Cloudflare Workers AI | 100,000 次/天 | 快速稳定 |
| Groq | 60次/分钟 | 推理极快 |
| Kimi | 暂时有限 | 中文友好 |
环境配置
# 本地模型（推荐）
export OLLAMA_HOST=http://localhost:11434# Cloudflare Workers AI（可选）
export CF_ACCOUNT_ID=your_account_id
export CF_API_TOKEN=your_token
# Groq（可选）
export GROQ_API_KEY=your_key
使用方式
命令行调用
# 自动选择最佳免费方案
python3 {baseDir}/scripts/ask_free_ai.py "你好"# 指定使用本地模型
python3 {baseDir}/scripts/ask_free_ai.py "你好" --provider ollama
# 指定使用云端
python3 {baseDir}/scripts/ask_free_ai.py "你好" --provider cloudflare
智能路由逻辑
1. 优先本地模型（最快/免费）
↓ 失败
- Cloudflare Workers AI（稳定）
↓ 失败
- Groq（推理快）
↓ 失败
- 返回错误
故障排除
- Ollama 未启动:
ollama serve - API 额度用完: 检查对应服务后台
- 网络问题: 确认能访问对应 API
贡献
欢迎提交 PR！一起打造最好的免费 AI 方案。
License
MIT License - 免费开源
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制