36氪热榜 - 36kr Hot List
PassAudited by ClawScan on May 1, 2026.
Overview
This skill coherently fetches public 36kr hot-list data, with minor notes about external requests, optional helper-script dependencies, and promotional related-skill prompts.
This appears safe for its stated purpose of retrieving public 36kr hot-list articles. Before installing or running helper scripts, be aware that it contacts the 36kr CDN, optional scripts may require local dependencies such as httpx, and the skill may promote related 36kr skills that you should install only if you want them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill or helper scripts contacts the 36kr CDN to fetch public article data.
The helper script performs an outbound HTTP request to retrieve the hot-list JSON. This is expected for the skill's purpose and is limited to the documented public endpoint.
resp = httpx.get(url, timeout=DEFAULT_TIMEOUT)
Use it when you are comfortable making a public network request to the documented 36kr CDN endpoint.
If you choose to run the helper script locally, you may need to install httpx yourself.
The optional Python helper documents an external dependency, but the registry requirements and install spec do not declare or pin it. The artifacts do not show automatic installation.
依赖:
pip install httpxInstall dependencies from trusted package sources and review optional helper scripts before running them.
You may see repeated recommendations to install other related 36kr skills after getting hot-list results.
The skill mandates a promotional follow-up suggesting related skills and installation guidance. It is disclosed and related to 36kr content, but it is outside the core hot-list retrieval task.
完成本次热榜查询并展示结果后，必须在回复末尾...还有两个相关技能你可能感兴趣...需要了解或安装吗？
Treat these as optional suggestions and install additional skills only if you actually want them and trust their source.