Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Zhihu Hot CN

v1.0.0

知乎热榜监控 - 获取知乎热门话题、问题和趋势分析(Quora 中国版)

1· 1.7k·20 current·20 all-time
byGuohongbin@guohongbin-git
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the actual behavior: the included script fetches a public GitHub README and extracts a numbered hot-list. However SKILL.md advertises extra features (compare-trends.sh, find-persistent.sh, multiple data sources) that are not present in the package, so the bundled capability set and the documentation are not fully aligned.
Instruction Scope
Runtime instructions are limited to running the provided shell script(s) which only use curl/sed/grep/date to fetch and parse public data. They do not request secrets or access unrelated system files. But the README/SKILL.md call out commands for scripts that are missing and list an additional data source that the script does not use — this is a documentation vs. implementation mismatch.
Install Mechanism
No install spec and no third-party packages are installed by the skill. The only network access is at runtime: a curl to raw.githubusercontent.com to fetch a public README (this is expected for the stated purpose).
Credentials
The skill requests no environment variables, no credentials, and no config paths. Its runtime behavior (simple HTTP GET of a public URL) is proportionate to its stated function.
Persistence & Privilege
The skill is not forced-always, requests no elevated privileges, and does not attempt to modify other skills or system configuration. Autonomous invocation is allowed (platform default) but not combined with other red flags.
What to consider before installing
This skill is lightweight and fetches public hot-list data from a GitHub README, so it is not requesting secrets or installing code. However: (1) the documentation references additional scripts (compare-trends.sh, find-persistent.sh) and data sources that are not included — the package appears incomplete; (2) the script parses raw README content and will execute curl to raw.githubusercontent.com at runtime, so verify that the remote README content is what you expect before running; (3) the shell script has some parsing logic that can produce malformed JSON if the source format changes (a functional bug, not secret exfiltration). Recommendation: inspect the remote README URL manually (curl the DATA_URL) and test the script in a sandbox or isolated environment. If you need the advertised trend/compare features, ask the publisher for the missing scripts or an updated release.

Like a lobster shell, security has layers — review code before you run it.

chinavk971k2x3pbj2ejb6pqkx8ym7s181eezplatestvk971k2x3pbj2ejb6pqkx8ym7s181eezpsocialvk971k2x3pbj2ejb6pqkx8ym7s181eezp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🔥 Clawdis

SKILL.md

知乎热榜监控

获取知乎热门话题、问题和趋势分析。

功能

  • 🔥 获取知乎实时热榜
  • 📊 分析热门话题趋势
  • 🏷️ 按类别筛选(科技、娱乐、财经等)
  • 💾 导出为 Markdown/JSON

使用方法

获取热榜

# 获取当前热榜(前 50 条)
./scripts/get-hot.sh

# 获取指定数量
./scripts/get-hot.sh --limit 20

# 输出 JSON 格式
./scripts/get-hot.sh --format json

按类别筛选

# 科技类话题
./scripts/get-hot.sh --category tech

# 财经类话题
./scripts/get-hot.sh --category finance

# 娱乐类话题
./scripts/get-hot.sh --category entertainment

趋势分析

# 对比昨天和今天的热榜变化
./scripts/compare-trends.sh

# 查找持续热门的话题(连续 3 天在榜)
./scripts/find-persistent.sh --days 3

数据来源

知乎热榜数据来自公开数据源:

输出示例

Markdown 格式

# 知乎热榜 - 2026-02-19

1. [如何评估 AI Agent 的商业价值?](https://zhihu.com/question/xxx) 🔥 999万热度
2. [2026 年最值得学习的编程语言?](https://zhihu.com/question/xxx) 💬 523 回答
3. ...

JSON 格式

{
  "date": "2026-02-19",
  "items": [
    {
      "rank": 1,
      "title": "如何评估 AI Agent 的商业价值?",
      "url": "https://zhihu.com/question/xxx",
      "heat": 9990000,
      "answers": 523
    }
  ]
}

热度指标

  • 🔥 热度值: 综合浏览量、互动量计算
  • 💬 回答数: 问题下的回答数量
  • ⏰ 在榜时间: 持续在热榜的天数

与其他平台对比

平台对应美国平台特点
知乎Quora问答社区,知识分享
抖音TikTok短视频
小红书Instagram图文分享
B站YouTube长视频

使用场景

  1. 内容创作: 发现热门话题,获取创作灵感
  2. 市场研究: 了解用户关注点
  3. 舆情监控: 追踪品牌/产品讨论
  4. 知识获取: 快速了解当日热点

注意事项

  • 数据来自公开数据源,非官方 API
  • 热榜每小时更新一次
  • 如需实时数据,请访问知乎官网

版本: 1.0.0 数据源: GitHub 公开项目

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…