📚 Asset Library Manager — 素材管理
v1.0.0一站式管理图片、视频、音频等素材，支持上传、分类、搜索、版本追踪与权限控制，让创作素材随时可查、可复用。
0· 164·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement an in-memory material library and does not request credentials, which is good. However: (1) the package contains TypeScript source but no install/build spec or required runtime (tsc/node) — ask the author how you should build and run it or expect runtime errors; (2) the index.ts listing is truncated in the manifest (ends with a stray 'a …[truncated]'), which could mean the source is incomplete or corrupted — do not deploy until you get the full file; (3) the code ...详细分析 ▾
✓ 用途与能力
Name, description, SKILL.md, and the TypeScript code all implement an asset/material library (upload, search, versioning, tagging). The functionality requested by the skill aligns with its stated purpose. There are no unrelated requested credentials, binaries, or config paths.
ℹ 指令范围
The SKILL.md instructions and API usage (api.executeAction, events) stay within the scope of material management. The code uses api.config?.autoTagging and api.log — expected for a skill. No instructions ask the agent to read unrelated system files or exfiltrate environment variables. However, the SKILL.md says TypeScript must be compiled but the package provides no install/build automation or runtime binary requirements, which is an operational inconsistency to resolve.
⚠ 安装机制
There is no install spec even though the package contains TypeScript source (index.ts) and a package.json. Running this skill would realistically require a TypeScript build step and a Node runtime (or an explicit install flow). The absence of any install/build instructions or declared required binaries (tsc/node) is inconsistent and could lead to runtime errors. Also the index.ts file appears truncated in the listing (trailing 'a …[truncated]'), which may indicate the source is incomplete or corrupted.
✓ 凭证需求
The skill declares no required environment variables, no primary credential, and no config paths. The code does not access secrets or external credentials; storeFile currently returns a mock token and there are comments about integrating with external storage but no actual external calls. The requested environment access is proportionate to the stated functionality.
✓ 持久化与权限
The skill is not flagged always:true and is user-invocable. It does not request persistent system privileges or attempt to modify other skills' configuration. No suspicious persistence behavior is present.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install ad-production-material-library
镜像加速npx clawhub@latest install ad-production-material-library --registry https://cn.longxiaskill.com