安全扫描
OpenClaw
可疑
medium confidenceThis is an instruction-only LINE UI documentation skill that is largely coherent with its purpose, but there are inconsistent claims about a file-delivery workflow and a missing reference file which should be clarified before installation.
评估建议
This skill is mostly documentation and templates for building LINE Flex/UIs and does not request credentials or install code — that's good. Before installing: 1) Ask the skill author to reconcile the README references to a 'File Delivery SOP' / Google Drive workflow and the missing references/file-delivery.md with SKILL.md's statement that file delivery was removed. 2) Confirm whether the listed directive types (e.g., device control, Apple TV) are actually supported by your LINE plugin or are on...详细分析 ▾
ℹ 用途与能力
The name/description (LINE Rich Messages) matches the content: templates, directives, and raw JSON for LINE Flex messages. However, README and some references mention a 'File Delivery SOP' / Google Drive workflow and list references/file-delivery.md, while SKILL.md explicitly states 'No file delivery' and that file delivery content was removed — a clear inconsistency between files and the stated scope.
ℹ 指令范围
SKILL.md stays within documentation: it instructs how to construct Flex JSON and use directive tags, warns against embedding credentials or making unsolicited network calls, and defers actual sending to the LINE plugin. A minor scope issue: directives.md lists unusual items such as 'Device Control' and 'Apple TV' tags which are atypical for a messaging/template guide — they may be harmless placeholders but should be validated against the actual LINE plugin capabilities.
✓ 安装机制
No install spec and no code files — instruction-only content. This is low-risk: nothing will be downloaded or written by an installer.
✓ 凭证需求
The skill requires no environment variables, no credentials, and does not embed tokens. The metadata requests the 'line' plugin, which is appropriate for the stated purpose.
✓ 持久化与权限
always is false, no special privileges requested, and the skill does not request modifying other skills or system-wide settings. Autonomous invocation is allowed by default but not combined with other concerning privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.52026/2/22
● 可疑
安装命令 点击复制
官方npx clawhub@latest install line-rich-messages
镜像加速npx clawhub@latest install line-rich-messages --registry https://cn.clawhub-mirror.com
技能文档
This skill transforms the agent from a text-only bot into a professional LINE assistant with native UI capabilities.
Core Principle: Rich-UI 優先 (Low-Friction)
Typing 在...上 mobile slow 和 错误-prone. Always prioritize Rich UI elements 到 minimize 用户's 需要 到 回复 带有 text.Quick 导航
Detailed guides for each feature:- decision-matrix.md: Choose best UI 元素 对于 scenario.
- directives.md: Syntax 对于 interactive cards 和 bubbles.
- flex-templates.md: Raw JSON Templates 对于 100% reliable UI creation.
- markdown-到-flex.md: Auto-美化 tables 和 code blocks.
Best Practices
- 否 file delivery: 对于 security, skill intentionally 做 不 include 任何 workflow 对于 uploading/sharing files (e.g., Google Drive). 如果 您 需要 file delivery, implement 在...中 separate, tightly-scoped skill 带有 explicit allowlists 和 safeguards.
- Guided Choices: 如果 您 ask question 带有 2-4 fixed answers, always include
[[quick_replies: ...]]. - Structured Data: 使用 Markdown tables 对于 任何 multi-point information (e.g., flight 乘以, order items).
- Destructive Actions: 使用
[[confirm: ...]]对于 actions 点赞 "删除 Memory" 或 "取消 Project". - UX Limitation (Crucial): Text 在...内 Flex Messages (包括 Markdown tables 和 auto-converted replies) cannot selected 或 copied 由 用户.
Security / Scope (Important)
- skill documentation + templates 对于 building better LINE UX (Flex, buttons, quick replies).
- 做 不 ship credentials 和 做 不 automatically 使 external API calls.
- Anything touches network 或 第三个-party services 必须 explicitly requested 由 用户 和 仅 之后 runtime correctly configured.
Credentials / Setup Clarification
- LINE: Sending messages handled 由 OpenClaw LINE channel/插件 setup. skill 做 不 require 您 到 declare 或 embed
LINE_CHANNEL_ACCESS_TOKEN/LINE_CHANNEL_SECRET. - File delivery: Intentionally 不 included (removed 对于 safety). 做 不 上传/分享 local files 从 agent runtime.
🏆 終極解決方案:手工 Raw Flex ( Golden Path)
若系統標籤轉換失敗,請使用 手工構建 JSON。這是最穩定且能 100% 呈現自定義 UI 的方式。
穩定發送按鈕的 JSON 模板
將此 JSON 作為純文字發送,若系統支援自動偵測則會轉換;若不支援,請改走 OpenClaw 的 LINE plugin 正規發送路徑(或由管理員在已授權的環境中操作),避免在 skill 內容中引導直接curl 呼叫外部 API。{
"type": "bubble",
"body": {
"type": "box",
"layout": "vertical",
"contents": [
{ "type": "text", "text": "標題", "weight": "bold", "size": "lg" },
{ "type": "text", "text": "內文描述", "wrap": true },
{
"type": "button",
"style": "primary",
"color": "#1DB446",
"action": {
"type": "message",
"label": "按鈕文字",
"text": "回傳指令"
}
}
]
}
}
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制