Qq

Extract and summarize public QQ app pages, announcements, and group invites without login or message access.

Security Scan

The skill's instructions and requirements are consistent with its stated purpose of extracting and summarizing publicly accessible QQ pages; there are no overtly disproportionate permissions or installs requested, but a few operational gaps (rendering dependency and runtime behavior) merit attention before use.

Purpose & Capability

Name/description (extract/summarize public QQ pages, announcements, group invites) match the SKILL.md content. The skill only targets public pages and explicitly disclaims login/message access, which aligns with the declared purpose.

Instruction Scope

SKILL.md instructs fetching public share pages, extracting title/author/time/body/tags, and waiting for dynamic rendering. It does not ask the agent to read unrelated files or environment variables and warns about frequency control. However, it relies on the ability to render dynamic content (e.g., a headless browser) but does not state or require any specific runtime capabilities or binaries — this is an operational omission rather than a malicious instruction.

Install Mechanism

Instruction-only skill with no install spec, packages, or external downloads. This is low-risk; nothing is written to disk by the skill itself.

Credentials

The skill requires no environment variables, credentials, or config paths. That is proportionate for a scraper of public pages. There are no unrelated credentials requested.

Persistence & Privilege

The skill does not request always:true or any elevated persistent privileges. Default autonomous invocation is allowed (platform default) and is not by itself a concern here.

Assessment

This skill appears coherent for scraping and summarizing public QQ pages, but check these operational points before installing: - Runtime rendering: SKILL.md says content is dynamically loaded and requires waiting for rendering. Ensure your agent environment provides an HTML renderer/headless browser (e.g., Puppeteer/Playwright or a browser tool). The skill does not declare this dependency. - Rate limits & robots: Implement rate-limiting and respect QQ's robots/terms of service to avoid blocking or legal issues. The SKILL.md mentions frequency control but does not enforce it. - Data handling: The skill can extract page content. Decide where scraped data will be stored or transmitted and ensure sensitive or private data are not collected or leaked. The skill gives no guidance about downstream storage or external endpoints. - Verify compliance: Confirm that summarizing and storing public announcements or invite pages is allowed under QQ's terms and applicable law in your jurisdiction. No code files or regex scan findings were present — behavior will depend entirely on how your agent implements web fetching/rendering. If you need the skill to run in your environment, consider adding explicit runtime requirements (browser binary, timeouts, proxy settings) and conservative rate limits.

用途与边界

• 面向公开应用与分享页面的信息提取与摘要
• 不提供账号登录、消息收发或权限绕过能力
• 仅处理公开可访问页面

关键入口

• 主页：https://im.qq.com/
• 公开应用页/公告页：由分享链接进入

常见任务

• 公告分享页的标题/作者/更新时间与正文摘要
• 公开应用页的功能说明、版本信息与链接整理
• 公开群邀请页的基本说明与注意事项摘要

数据字段

• 标题、作者、更新时间、正文摘要、标签、来源链接
• 应用名称、功能概述、版本信息、链接
• 群邀请页描述与条款摘要

自动化要点

• 内容动态加载，需等待渲染完成后解析
• 无账号鉴权能力，仅处理公开分享
• 频率控制避免重复访问

示例流程

• 公告摘要：访问分享页 → 解析标题/作者/更新时间 → 抽取正文摘要
• 应用整理：进入应用页 → 抽取功能/版本信息 → 输出链接清单
• 群页面摘要：访问邀请页 → 抽取说明与条款 → 输出注意事项

合规提示

• 遵守平台与信息安全规定，不处理非公开内容
• 输出仅用于内部分析与提醒