Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Affiliate Marketing Auto

v1.0.2

自动化联盟营销全流程,支持高佣金产品发现、SEO内容生成、链接追踪和收入报表分析,助力24/7被动收益。

0· 231·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lvjunjie-byte/affiliate-marketing-auto-lvjunjie.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Affiliate Marketing Auto" (lvjunjie-byte/affiliate-marketing-auto-lvjunjie) from ClawHub.
Skill page: https://clawhub.ai/lvjunjie-byte/affiliate-marketing-auto-lvjunjie
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install affiliate-marketing-auto-lvjunjie

ClawHub CLI

Package manager switcher

npx clawhub@latest install affiliate-marketing-auto-lvjunjie
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (affiliate marketing automation) aligns with the code and SKILL.md: modules for product discovery, content generation, link tracking and analytics exist. However there are minor incoherences: registry/skill metadata (slug/version) differs from package.json/clawhub.json names and versions (skill metadata version 1.0.2 vs package.json 1.0.1; clawhub.json lists name "affiliate-marketing-pro" while the public slug is "affiliate-marketing-auto"). Source is listed as unknown and homepage is absent despite README pointing to a GitHub URL. These provenance and naming mismatches reduce trust and should be clarified.
Instruction Scope
SKILL.md stays within the stated scope: it instructs the agent to configure affiliate platform API keys via configure(), call findProducts(), generateContent(), createTrackingLink(), getRevenueReport(), exportReport(), and setupAutomation(). It does not instruct reading arbitrary system files or shell history. One operational mismatch: the documentation and examples assume real-time income data from affiliate platforms, but the analytics module in the source generates simulated/random data rather than querying a backend—this contradicts claims of '实时收入仪表板' unless other modules (product-finder/link-tracker) collect real data. You should inspect product-finder.js and link-tracker.js (truncated in the bundle) to confirm how external APIs and click events are handled.
Install Mechanism
No install spec is provided in the skill bundle (instruction-only install recommendations exist). The package contains package.json with typical npm dependencies (axios, cheerio, node-fetch) and a package-lock; no remote one-off downloads or obscure install URIs are present. That is a normal and lower-risk install pattern for Node.js code, but installing will pull common npm packages—standard supply-chain hygiene (scan dependencies, run npm audit) is recommended.
Credentials
The skill requests no declared environment variables or primary credential in its metadata, yet runtime use requires platform API keys (Amazon, ShareASale, CJ, etc.) provided via affiliate.configure(). This is not necessarily malicious, but metadata should clearly document required credentials. Before providing API keys, verify the code paths that store, transmit or log those keys (especially product-finder and link-tracker). Also confirm whether the code ever sends keys or tracked data to third‑party endpoints beyond the configured affiliate platforms or your configured shortener.
Persistence & Privilege
The skill does not request always:true and does not declare any system-level config paths or service privileges. It exports a skill instance and performs in-process operations; it does not appear to modify other skills or system-wide settings. Autonomous invocation is allowed by default (normal).
What to consider before installing
In plain terms: the code mostly does what the description says, but the package's provenance and some implementation details are unclear—take these steps before installing or handing over API keys: 1) Verify the source repository and maintainer (confirm the GitHub URL actually hosts this exact code and that the maintainer is trustworthy). The bundle shows mismatched names/versions; ask the publisher to explain. 2) Inspect product-finder.js and link-tracker.js (the truncated files) to confirm how they call external APIs, whether they scrape sites, and whether they post any data to unexpected endpoints (look for axios/fetch POSTs to non-affiliate domains or hardcoded URLs). 3) Don't pass real affiliate API keys or account-level secrets until you confirm where they are used/stored. Prefer providing keys to a local sandboxed run first and monitor outbound network requests. 4) Run the test suite locally and observe network activity (use a network proxy or packet capture) to ensure no unexpected exfiltration. Also run npm audit on dependencies. 5) Note the analytics module generates simulated/random data—if you need real-time, production-grade reporting, verify integration with your affiliate platforms is implemented and tested. If you cannot confirm provenance or the external-calls in product-finder/link-tracker, treat the skill as untrusted and avoid supplying real credentials or running it on production systems.

Like a lobster shell, security has layers — review code before you run it.

latestvk971x4nvhm82nnx2hkb4az88bn83986d
231downloads
0stars
2versions
Updated 2h ago
v1.0.2
MIT-0

Affiliate-Marketing-Auto - 联盟营销自动化技能

概述

自动化联盟营销全流程技能,帮助 AI Agent 实现 24/7 被动收入。包含高佣金产品发现、自动内容生成、链接追踪管理和收入报告分析四大核心功能。

功能特性

🔍 高佣金产品发现

  • 多平台联盟产品搜索(Amazon Associates、ShareASale、CJ Affiliate 等)
  • 智能佣金率筛选(支持设置最低佣金阈值)
  • 产品热度趋势分析
  • 竞争度评估
  • 利基市场推荐

✍️ 自动内容生成

  • SEO 优化产品评测文章
  • 社交媒体推广文案(Twitter、小红书、微博等)
  • 邮件营销模板
  • 视频脚本生成
  • 多语言支持

🔗 链接追踪和管理

  • 自动短链生成
  • UTM 参数管理
  • 点击率追踪
  • 转化率监控
  • A/B 测试支持

📊 收入报告和分析

  • 实时收入仪表板
  • 转化率分析
  • 最佳产品推荐
  • 收入趋势预测
  • 导出报告(CSV/PDF)

安装

# 使用 skillhub 安装(推荐)
skillhub install affiliate-marketing-auto

# 或使用 clawhub 安装
clawhub install affiliate-marketing-auto

# 手动安装
cd D:\openclaw\workspace\skills
git clone <repository-url> affiliate-marketing-auto
cd affiliate-marketing-auto
npm install

快速开始

1. 配置联盟账户

const affiliate = await skill('affiliate-marketing-auto');

await affiliate.configure({
  platforms: {
    amazon: {
      apiKey: 'your-amazon-api-key',
      associateTag: 'your-associate-tag'
    },
    shareasale: {
      userId: 'your-user-id',
      apiKey: 'your-api-key'
    }
  }
});

2. 发现高佣金产品

// 搜索特定类别的高佣金产品
const products = await affiliate.findProducts({
  category: 'electronics',
  minCommissionRate: 0.10,  // 最低 10% 佣金
  minPrice: 50,             // 最低$50
  maxResults: 20
});

console.log(`找到 ${products.length} 个高佣金产品`);

3. 生成推广内容

// 生成产品评测文章
const review = await affiliate.generateContent({
  type: 'review',
  product: products[0],
  tone: 'professional',
  length: 'long',
  seoKeywords: ['best laptop 2024', 'laptop review']
});

// 生成社交媒体文案
const socialPosts = await affiliate.generateContent({
  type: 'social',
  product: products[0],
  platforms: ['twitter', 'xiaohongshu', 'weibo']
});

4. 追踪链接表现

// 创建追踪链接
const trackingLink = await affiliate.createTrackingLink({
  productUrl: products[0].url,
  campaign: 'spring-promotion',
  source: 'twitter'
});

// 获取链接统计
const stats = await affiliate.getLinkStats(trackingLink.id);
console.log(`点击数:${stats.clicks}, 转化数:${stats.conversions}`);

5. 查看收入报告

// 获取收入报告
const report = await affiliate.getRevenueReport({
  startDate: '2024-01-01',
  endDate: '2024-03-31',
  groupBy: 'product'
});

// 导出报告
await affiliate.exportReport(report, {
  format: 'csv',
  path: './reports/q1-2024.csv'
});

高级用法

自动化工作流

// 设置自动化营销流程
await affiliate.setupAutomation({
  schedule: 'daily',
  tasks: [
    { action: 'findProducts', params: { category: 'trending' } },
    { action: 'generateContent', params: { type: 'social' } },
    { action: 'publishContent', params: { platforms: ['twitter', 'xiaohongshu'] } },
    { action: 'trackPerformance', params: {} }
  ]
});

利基市场分析

const nicheAnalysis = await affiliate.analyzeNiche({
  keywords: ['fitness', 'home workout', 'yoga equipment'],
  competition: 'medium',
  minVolume: 1000
});

console.log(`推荐利基:${nicheAnalysis.topNiche}`);
console.log(`预估月收入:$${nicheAnalysis.estimatedRevenue}`);

API 参考

配置方法

方法参数说明
configure(config)config: Config配置联盟平台和 API 密钥

产品发现

方法参数返回
findProducts(options)FindOptionsProduct[]
getTrendingProducts(category)stringProduct[]
analyzeNiche(keywords)string[]NicheAnalysis

内容生成

方法参数返回
generateContent(options)ContentOptionsGeneratedContent
generateReview(product)Productstring
generateSocialPosts(product)ProductSocialPost[]

链接追踪

方法参数返回
createTrackingLink(options)LinkOptionsTrackingLink
getLinkStats(linkId)stringLinkStats
updateLink(linkId, updates)string, LinkUpdatesTrackingLink

收入分析

方法参数返回
getRevenueReport(options)ReportOptionsRevenueReport
exportReport(report, options)Report, ExportOptionsstring
getPredictions(months)numberRevenuePrediction

定价

$79/月

包含:

  • 无限产品搜索
  • 每月 1000 次内容生成
  • 无限链接追踪
  • 实时收入报告
  • 优先技术支持

注意事项

  1. 合规性:确保遵守各联盟平台的服务条款
  2. 披露要求:在推广内容中必须披露联盟关系
  3. API 限制:注意各平台的 API 调用频率限制
  4. 数据隐私:妥善保管 API 密钥和用户数据

支持

许可证

MIT License

Comments

Loading comments...