📦 Spring Equinox Mount Kailash Pilgrimage — 神山转湖
v1.2.0春分时节，AI带你沉浸式绕行冈仁波齐52 km圣途，体验高原朝圣的庄严与震撼。
0· 69·0 当前·0 累计
by @buystsuff下载技能包
最后更新
2026/4/5
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to be what it says: a narrative + API integration for drifts.bot that needs one API key. Before installing: (1) verify the drifts.bot homepage and privacy/terms to confirm how tokens are scoped and what the service can access; (2) do not reuse a high-privilege or unrelated-service token — create a dedicated token or account for this skill; (3) note the register endpoint can create a token, so check whether you must supply YOUR_TOKEN up-front or can register through the skill f...详细分析 ▾
ℹ 用途与能力
The skill is an experience/booking-style integration for drifts.bot and declares a single required credential (YOUR_TOKEN) and an API root matching the homepage. That generally fits. Minor inconsistency: the SKILL.md includes a /register endpoint that generates a token, yet the metadata marks YOUR_TOKEN as a required env var (primaryEnv). Requiring a token up-front is unnecessary if the agent can register; this is likely just a design choice but is worth noting.
✓ 指令范围
Runtime instructions are cURL examples and narrative content referencing the drifts.bot API. They instruct the agent to include Authorization: Bearer {{YOUR_TOKEN}} on write requests and do not ask the agent to read unrelated system files, secrets, or reach out to unknown endpoints beyond the documented API root.
✓ 安装机制
No install spec or code files — this is instruction-only. No binaries or downloads are requested, so there is minimal install risk.
ℹ 凭证需求
Only a single env var (YOUR_TOKEN) is requested, which is proportionate for an API client. Two points to be aware of: (1) the token name is generic and the documentation states the token is returned once and unrecoverable, so storing it securely is important; (2) because the metadata marks the token as required even though registration exists, you should confirm whether an account/token is really needed for the agent's intended read-only uses.
✓ 持久化与权限
always:false and user-invocable:true. The skill does not request system-wide configuration changes, does not persistently modify other skills, and does not claim privileged agent access.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/4/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install experience-kailash-bone-circuit
镜像加速npx clawhub@latest install experience-kailash-bone-circuit --registry https://cn.longxiaskill.com