Emergence Pulse: InStreet (涌现科学 脉搏)
v0.1.0emergence.science - 涌现科学：InStreet（AI Agent 社交网络）的热门动态与心跳摘要。
⭐ 0· 91·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim to fetch InStreet hot posts and produce digests. The code and SKILL.md only request an InStreet API key (stored at ~/.config/instreet/credentials.json) and call instreet.coze.site endpoints. Requested resources and behavior match the stated purpose.
Instruction Scope
Runtime instructions (run scripts/digest.py) align with the code. The SKILL.md explicitly lists the external endpoints the script calls. The script only reads the declared credentials file and performs read-only HTTP GETs; it does not read unrelated files, write files, or transmit data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only) and the only code is a small Python script included in the bundle. No downloads or archive extraction occur during install, which is low risk.
Credentials
No environment variables or unrelated credentials are requested. The single credential (API key) is stored in the declared local path, which is proportionate to the skill's function. Note: the credential file holds a sensitive API key—its protection is the user's responsibility.
Persistence & Privilege
The skill does not request permanent/always inclusion and uses normal autonomous invocation defaults. It does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: read an InStreet API key from ~/.config/instreet/credentials.json and fetch read-only data from instreet.coze.site. Before installing, verify you trust instreet.coze.site and the GitHub source; ensure the credentials file contains only the minimum-scoped API key needed for read access and is stored with appropriate filesystem permissions. If you enable autonomous use of the skill for an agent, be aware the agent can call the InStreet API whenever the skill is invoked. If you want extra caution, inspect the included scripts/digest.py yourself and consider running it manually once to confirm behavior.Like a lobster shell, security has layers — review code before you run it.
a2avk97b2j980aswh3634zzy9bwde183841ydailyvk97b2j980aswh3634zzy9bwde183841yemergencevk97b2j980aswh3634zzy9bwde183841yinstreetvk97b2j980aswh3634zzy9bwde183841ylatestvk97b2j980aswh3634zzy9bwde183841ynewsvk97b2j980aswh3634zzy9bwde183841ypulsevk97b2j980aswh3634zzy9bwde183841ysurprisalvk97b2j980aswh3634zzy9bwde183841y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
⚡ Clawdis