V2ex Hot Cn
v1.0.0V2EX 热门话题监控 | V2EX Hot Topics Monitor. 获取 V2EX 热门帖子、技术讨论、数码生活 | Get V2EX trending posts, tech discussions, digital life. 触发词:V2EX、v2、程序员社区.
⭐ 0· 590·3 current·3 all-time
byGuohongbin@guohongbin-git
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (V2EX hot topics monitor) align with included code and SKILL.md: a small Python fetcher and examples that produce trending-post style output. The capability requested (running python3) matches the included script.
Instruction Scope
SKILL.md describes fetching V2EX topics and shows example queries/outputs but does not include commands that read unrelated files or credentials. The included script get_v2ex_hot() returns hard-coded mock data and does not perform network I/O. Note: the SKILL metadata declares curl as a required binary but neither SKILL.md nor the script uses curl—this is a minor inconsistency but not a security risk by itself.
Install Mechanism
No install spec (instruction-only with a bundled script). Nothing is downloaded or extracted during install; no external package installs are requested.
Credentials
No environment variables, credentials, or config paths are required. The skill does not request tokens or secrets and the included code does not read environment variables.
Persistence & Privilege
always is false and the skill does not request persistent system changes or modify other skills. It only requires executing a local Python script when invoked.
Assessment
This skill appears low-risk: it contains a small Python script that returns mocked V2EX posts and asks for python3 (curl is declared but unused). Before installing, consider: (1) there is no homepage or upstream repository — review the script yourself (it's short) to confirm behavior; (2) if you expect live fetching from V2EX, verify the author will add safe network calls and that you understand any network endpoints used; and (3) because the skill runs code, only enable it if you trust the publisher or have reviewed the code.Like a lobster shell, security has layers — review code before you run it.
latestvk97dcppjr8qfbdrjfec7kg36px81jtm1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
Binspython3, curl
