Social Media Data Hub
v1.0.0Unified Apify-based retrieval for TikTok, Instagram, X/Twitter, and YouTube profile, post, and comment data with cross-platform normalization for analysis wo...
⭐ 1· 92·0 current·0 all-time
byGalaxy@galaxy-earth
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: scripts call Apify actor endpoints to fetch profiles, posts, and comments and then normalize results. Requested binary (python3) and environment variable (APIFY_TOKEN) are expected for this purpose.
Instruction Scope
SKILL.md only instructs running the included Python scripts; the scripts use APIFY_TOKEN and call api.apify.com. They do not attempt to read unrelated local files, other environment variables, or contact unknown external endpoints. The normalization code is local and clear.
Install Mechanism
There is no install spec (instruction-only / script bundle). No downloads or remote executable installs are performed by the skill itself.
Credentials
Only APIFY_TOKEN is required, which is proportionate. Note: the client embeds the token as a query parameter in Apify API URLs (e.g., ?token={APIFY_TOKEN}), which is an expected Apify usage pattern but can expose the token in logs or referer headers — consider using a scoped/rotating token and minimizing exposure.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:false). It does not modify other skills or system configuration.
Assessment
This skill legitimately needs your APIFY_TOKEN and python3 to start Apify actor runs and retrieve datasets. Before installing: 1) Confirm you trust the Apify actors referenced (clockworks, apify, apidojo, streamers) because running them will consume your Apify account credits and could execute arbitrary actor logic on Apify's platform. 2) Use a least-privilege or rotatable APIFY_TOKEN, and monitor billing/usage — actor runs incur real cost. 3) Be aware the token is passed in URL query parameters (may appear in logs); avoid using long-lived tokens in shared environments. 4) If you need extra assurance, inspect the upstream actor source (on Apify) to verify what each actor scrapes and stores. Overall the skill appears internally consistent and implements what it claims.Like a lobster shell, security has layers — review code before you run it.
latestvk977wa44qss620kqv70yfxrf4d838jn3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binspython3
EnvAPIFY_TOKEN