Ximalaya
v0.1.0提供喜马拉雅公开节目和主播页面的播放量、评论等数据摘要与榜单统计，辅助内容分析与提醒。
⭐ 0· 140·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (summarize public metrics for Ximalaya programs/hosts) matches the SKILL.md: instructions focus on reading public pages, extracting play/like/comment counts, and producing summaries. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
SKILL.md stays within the stated scope: it describes visiting public pages, extracting listed fields, controlling request frequency, avoiding bulk scraping, downloads, or API abuse, and recommends human-in-the-loop for dynamic pages. It does not instruct reading local files, environment secrets, or posting data to unexpected endpoints.
Install Mechanism
No install spec or code files are present (instruction-only). That minimizes on-disk execution risk and is proportional for a scraping/summary helper.
Credentials
The skill requests no environment variables, credentials, or config paths. This is appropriate for a helper that works only with public web pages.
Persistence & Privilege
No elevated persistence requested (always:false). The skill is user-invocable and may be called by the agent per platform defaults; nothing in the metadata asks for permanent or cross-skill privileges.
Assessment
This skill appears coherent and low-risk as-written, but consider these practical points before installing:
- Legal/TOS: scraping even public pages can violate a site's terms of service. Confirm this usage is acceptable for your context or use an official API if available.
- Rate limits & blocking: follow the SKILL.md advice to limit request frequency and avoid bulk automated harvesting to reduce risk of being blocked or causing harm.
- Data sensitivity: the skill targets public metrics only; avoid extracting or storing any private or user-identifying data you don't have permission to use.
- Implementation detail: SKILL.md notes dynamic rendering and human verification may be needed — if you later add code (headless browsers, proxies, or credentials), re-evaluate for additional risks.
- Source provenance: the skill has no homepage or code; if you plan to rely on it long-term, ask the publisher for source or implementation details to verify behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk972vm89jmntpaqqyrcb8hmn6s833kw5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.