Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Content Analytics

分析掘金、小红书、知乎多平台内容表现数据,提供汇总对比和基于AI的优化建议。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 225 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (analyze Juejin, Xiaohongshu, Zhihu content) matches the SKILL.md functionality. Requesting cookies for Juejin and Xiaohongshu is consistent with scraping/creator‑center access. However, Zhihu is listed as a data source but no cookie/config example is provided. The tech stack calls out Playwright and GLM‑5 though no install or runtime requirements are declared, which is an omission.
Instruction Scope
SKILL.md tells the agent to analyze and compare platform data and shows optional JSON cookie configs for two platforms. It does not instruct reading unrelated system files or environment variables. But it is vague about the exact data‑fetch method (official APIs vs web scraping), error handling, and where analysis/modeling happens — leaving the agent broad discretion to use Playwright to scrape pages, which has higher privacy/risk implications.
!
Install Mechanism
There is no install spec (instruction‑only), which is low risk by itself, but the documented tech stack names Playwright (a browser automation tool) and GLM‑5 (an LLM). Mentioning Playwright implies downloading/ running headless browsers and possibly persisting session files/cookies; the skill provides no guidance or install steps for these components. This mismatch (expectation of heavy runtime dependencies without install instructions) is a practical and security concern.
!
Credentials
The skill does not declare any required environment variables, yet it expects sensitive credentials (platform cookies) passed in JSON config examples. Cookies are high‑value secrets that expose account access; the skill offers no guidance on storage, scoping, or using official OAuth tokens instead. Also, Zhihu is a declared data source but there is no example credential/config for it, which is inconsistent.
Persistence & Privilege
The skill is not always‑on, does not request system config paths, and is instruction‑only. It does not declare persistence or system‑wide changes. There is no explicit request to modify other skills or store agent‑wide tokens.
What to consider before installing
This skill could be useful, but it is underspecified and requests sensitive cookies without telling you how they will be used or stored. Before installing or providing credentials: 1) Ask the author to clarify whether official APIs or web scraping (Playwright) will be used for each platform and to provide a privacy/handling policy for cookies; 2) Prefer OAuth or API tokens scoped to read‑only creator data rather than raw session cookies; 3) Ask how GLM‑5 is hosted and whether any API keys or data leave your environment; 4) Avoid pasting account cookies into public or shared agents — treat them as high‑risk secrets; 5) If Playwright or a headless browser will be run, only allow it in a controlled environment since it can persist session files. If the author cannot clarify these points (especially where Zhihu creds belong and how secrets are stored/transmitted), consider the skill suspicious and avoid supplying credentials.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9792ah6emdn7r3gxfvneq7pr182qgq4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Content Analytics Skill

分析多平台内容表现数据,生成优化建议。

功能

  • 掘金文章数据分析(阅读、点赞、评论、收藏)
  • 小红书数据分析(曝光、互动、转化)
  • 知乎数据分析(浏览、赞同、评论)
  • 跨平台数据汇总对比
  • AI 生成优化建议

使用方式

分析我的掘金文章表现
帮我对比最近一周的小红书和知乎数据
给我内容优化建议

配置

掘金(可选)

{
  "juejin": {
    "cookie": "your_juejin_cookie"
  }
}

小红书(可选)

{
  "xiaohongshu": {
    "cookie": "your_xhs_cookie"
  }
}

数据源

  1. 掘金创作者中心 API
  2. 小红书创作者中心
  3. 知乎创作中心

输出格式

📊 内容表现分析报告

## 掘金(最近7天)
- 文章数:5
- 总阅读:12,345
- 平均阅读:2,469
- 点赞率:3.2%
- 收藏率:1.8%

## 优化建议
1. 标题优化:加入数字和疑问词可提升点击率 15%
2. 发布时间:周二/周四 20:00-22:00 流量最高
3. 内容方向:AI 赚钱类文章互动率最高

## 下周策略
- 重点:AI 工具对比类文章
- 发布时间:周二 21:00,周四 21:00
- 预期阅读:15,000-20,000

技术栈

  • Node.js / Python
  • Playwright(网页抓取)
  • GLM-5(AI 分析)

创建时间:2026-03-11

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…