📦 auteng-docs — 技术文档发布
v1.1.1零成本在线发布技术文档，支持 Mermaid 流程图、KaTeX 数学公式与代码高亮，提供持久工作区、版本管理及可分享链接。
0· 558·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
medium confidenceThe skill's requests and instructions are coherent with a docs-publishing client: it publishes markdown to auteng.ai, optionally installs an npm client, and uses wallet-based signatures for workspace actions; there are no unexplained credential requests or unexpected system access, but source/registry trust should be verified before installing the npm package.
评估建议
This skill appears to do what it says: publish Markdown to auteng.ai and manage a wallet-authenticated workspace. Before installing or using it, verify the npm package (@auteng/docs) and the auteng.ai domain (check the package's repository, readme, and recent npm publisher activity). Never paste your private keys into chat; use a signer that performs signing locally or on a trusted device. Expect published docs and 'public recents' to be publicly discoverable—do not publish secrets or private da...详细分析 ▾
✓ 用途与能力
Name/description match the instructions: the skill publishes Markdown with Mermaid/KaTeX and offers both one-off publish (no auth) and a wallet-authenticated workspace API. The declared install (npm package @auteng/docs) is a reasonable optional dependency for convenience; it is not required to use the curl endpoints described.
✓ 指令范围
SKILL.md instructs the agent to POST documents to auteng.ai and to use a signer object for workspace operations. It explicitly warns not to paste private keys. The instructions do not ask the agent to read local secret files, environment variables, or unrelated system paths. They do transmit user-provided content to an external service (expected for a publishing skill).
ℹ 安装机制
The install spec installs an npm package (@auteng/docs). Installing a package from the public npm registry is a common, moderate-risk action. Because this skill is instruction-only, installation is optional—curl usage works without it. Users should verify the package's npm page and source repository before installing.
✓ 凭证需求
The skill requests no environment variables, config paths, or credentials in metadata. The workspace API requires wallet-derived headers (address/signature/timestamp/nonce), which are proportional to the claimed wallet-based auth model. The SKILL.md warns not to paste private keys and recommends using a signer abstraction.
✓ 持久化与权限
always is false and the skill does not request system-wide persistence or modify other skills. Autonomous invocation is allowed (platform default) but not combined with any broad credential access. No concerning privilege escalation is requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.12026/2/24
auteng-docs 1.1.1 - Removed the evm-wallet credential requirement from skill metadata. - No changes to features or usage—documentation and authentication details remain otherwise unchanged.
● 可疑
安装命令
点击复制官方npx clawhub@latest install auteng-docs
镜像加速npx clawhub@latest install auteng-docs --registry https://cn.longxiaskill.com