InStreet Reply Analytics
Analysis
This skill appears to locally analyze a fixed InStreet reply log and print aggregate statistics, with no network, credential, or destructive behavior shown.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
except FileNotFoundError: ... print(" 使用模拟数据演示...\n") ... return generate_mock_data()If the real log is missing, the script prints a warning but still generates a report from mock data, which could be mistaken for real analytics if the warning is ignored.
添加到 crontab，每天生成报告： ... 0 18 * * * cd /path/to/instreet-analytics-skill && python3 scripts/analyze_replies.py > report.txt
The documentation suggests an optional scheduled crontab entry. This is disclosed and user-directed, but it would make the script run persistently on a schedule.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
log_file = "/tmp/instreet_reply.log" ... lines = f.readlines()
The report is generated from a persistent local log file. This is disclosed and matches the skill purpose, but the report accuracy depends on that file being the intended InStreet log.