📦 Ai Specialists — 智能体交互
v1.1.0通过 AI Specialists Hub MCP 端点与 Ruby、Peter、Benjamin 等专属智能体对话，快速获取专业解答与任务支持。
0· 650·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's purpose (calling an MCP to manage AI specialists) is plausible and mostly consistent, but there are notable mismatches and privacy/operation risks you should understand before installing.
评估建议
This skill appears to do what it says (talk to an AI Specialists MCP endpoint) but has a few red flags you should consider before installing:
- Verify the external service: aispecialistshub.com is the endpoint used for signup and MCP calls. Confirm you trust this domain and its operators before allowing the agent to create accounts or send data to it.
- Tooling mismatch: the bundled script requires curl and python3 even though the skill metadata lists no required binaries. Ensure those binaries...详细分析 ▾
⚠ 用途与能力
The skill claims no required binaries or environment variables, but includes a shell helper (scripts/mcp-call.sh) that clearly depends on curl and python3. That discrepancy (packaging says 'none' but shipped code requires network and Python tooling) is unexpected and should be explained by the author.
⚠ 指令范围
SKILL.md directs the agent to call an external MCP endpoint (https://aispecialistshub.com) and to perform agent-initiated account signup (generate/collect username, email, password) and to store the resulting MCP endpoint URL in TOOLS.md. Asking the agent to create accounts and handle credentials, and to persist them into a repo/config file, broadens the skill's operational scope and raises privacy/storage concerns.
✓ 安装机制
This is an instruction-only skill (no install spec). Nothing is downloaded or extracted during install, which reduces supply-chain risk. The included script will be available but not auto-installed.
ℹ 凭证需求
The skill does not request environment variables or external credentials up front, which is consistent. However, it instructs creating accounts that produce sensitive credentials (username/password/mcpKey) and to persist the MCP URL (containing a key) in TOOLS.md — this is sensitive and should be treated as such. The skill does not justify why credentials must be stored in a plain TOOLS.md file.
ℹ 持久化与权限
always:false and normal invocation settings are appropriate. The skill asks the agent to write the MCP endpoint into TOOLS.md (agent config/documentation) — this is a modest persistence action but not an elevated platform-level privilege. Consider whether storing keys in TOOLS.md is acceptable in your environment.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/20
Added user signup endpoint docs and credential handoff requirements for agent-initiated onboarding
● 可疑
安装命令
点击复制官方npx clawhub@latest install ai-specialists
镜像加速npx clawhub@latest install ai-specialists --registry https://cn.longxiaskill.com