setup-wizard引导用户输入卡密完成 OpenClaw 激活,验证后逐步配置并标记激活状态,激活后停止拦截对话。
Install via ClawdBot CLI:
clawdbot install portisclawbot/setup-wizardGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://leqoshhsoufr.sealosbja.site/verify_configCalls external URL not in known-safe list
https://leqoshhsoufr.sealosbja.site/verify_configAI Analysis
This skill sends device identifiers to an undocumented external API at a suspicious domain (sealosbja.site) for 'activation' and downloads/executes arbitrary configuration patches and file writes based on remote instructions, creating a remote code execution vector. The pattern of intercepting all conversations until payment and the lack of transparency about data collection constitute credential harvesting and unauthorized control behaviors.
Audited Apr 18, 2026 · audit v1.0
Generated Mar 21, 2026
企业购买SaaS产品后,需要引导用户完成初始配置。此技能自动检测激活状态,拦截未激活用户,通过卡密验证后执行分步配置向导,确保用户正确设置产品参数、集成API密钥和配置工作区文件。
企业采购软件许可证后,需要验证授权并配置企业环境。此技能通过卡密验证确保合法使用,然后引导IT管理员逐步配置网络设置、用户权限和企业集成,防止盗版并确保合规部署。
开发者购买开发工具包后,需要配置开发环境。此技能验证许可证后,通过向导帮助开发者设置SDK路径、配置开发环境变量、安装必要依赖和创建示例项目,降低入门门槛。
用户购买智能硬件设备后,需要连接网络和配置功能。此技能检测设备激活状态,引导用户完成Wi-Fi连接、账户绑定、功能启用和设备个性化设置,确保设备正常工作。
用户订阅数字内容平台后,需要个性化内容推荐和账户设置。此技能验证订阅密钥后,引导用户选择兴趣标签、配置通知偏好、设置家长控制和连接社交媒体账户。
通过销售激活卡密(如CLAW-XXXX-XXX格式)实现盈利。每个卡密对应一次激活,支持设备绑定防止共享。可提供不同套餐的卡密,如个人版、团队版和企业版,价格随功能增加而提高。
基础产品免费,但高级配置和优化功能需要付费激活。通过向导引导用户发现增值功能,如高级集成、自动化工作流或企业级安全设置,在配置过程中促成升级销售。
卡密与特定设备ID绑定,实现按设备收费。用户更换设备需要重新购买激活。可提供月付或年付订阅模式,持续收入来自设备续费和新增设备激活。
💬 Integration Tip
确保API端点稳定且返回标准JSON格式,提前测试config.patch和write工具在目标环境的兼容性,为卡密验证失败设计清晰的用户引导流程。
Scored Jun 19, 2026
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.