猫咪电子用品分析
v1.0.0生成专业的宠物科技用品（智能猫砂盆、自动喂食器等）分析文档，包含产品参数对比、真实用户评测收集（小红书/B站）、优缺点分析，并自动筛选排除厂商软广内容。适用于宠物用品选购指南、产品测评报告、养猫好物推荐等场景。
⭐ 0· 59·0 current·0 all-time
byrumu14@hwl1413520
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (pet product analysis) match the included SKILL.md, template, guidance, and helper script. The materials only request network access for search/scrape of public posts and produce structured reports — no unrelated credentials, binaries, or system access are requested.
Instruction Scope
SKILL.md explicitly directs the agent to search public platforms (小红书/B站), collect links, and evaluate comments to filter sponsored content. That scope is consistent with the stated purpose, but it implies scraping/collecting third‑party user content and comment data which can implicate platform TOS and privacy considerations. The instructions do not ask the agent to read local files or environment variables beyond network access.
Install Mechanism
No install spec is present (instruction-only with an included helper script). Nothing is downloaded or installed automatically by the manifest; the code file exists in the skill bundle and will not by itself perform network or system actions unless executed by the agent runtime.
Credentials
The skill declares no required environment variables, credentials, or config paths. This is proportionate for a web‑search/scraping/reporting skill. If you integrate it with authenticated APIs later, credentials would be expected then and should be reviewed.
Persistence & Privilege
Defaults (always: false, agent invocation allowed) are unremarkable. The skill does not request permanent presence or system-level privilege escalation.
Assessment
This skill appears coherent with its purpose and requests no secrets, but review and test before trusting outputs: 1) It relies on scraping/collecting public posts (小红书, B站) — ensure scraping complies with each platform's terms and privacy rules and be careful about storing personal user data. 2) The included helper script implements heuristic sponsored-content detection; heuristics can produce false positives/negatives and there are minor bugs (e.g., a reference to signals["_level"] that doesn't exist and a mismatch when using lowercased content) — audit/fix these before production use. 3) If you plan to provide site credentials or integrate authenticated APIs to access non-public content, treat those credentials as sensitive and only grant the minimum required scope. 4) Consider rate limits and polite scraping (delays, caching) to avoid being blocked. Overall the bundle is internally consistent (benign) but requires ordinary engineering review and compliance checks before deployment.Like a lobster shell, security has layers — review code before you run it.
latestvk971yg3hj9tr0636g9hy8danas84p09k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.