Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hotspot Aggregator

v1.0.0

🔥 热点聚合监控 - 一站式聚合微博/百度/知乎/抖音热搜榜,自动生成每日热点报告,支持关键词订阅推送。适用于自媒体运营、内容创作、市场分析等场景。

0· 180·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for onlyloveher/hotspot-aggregator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Hotspot Aggregator" (onlyloveher/hotspot-aggregator) from ClawHub.
Skill page: https://clawhub.ai/onlyloveher/hotspot-aggregator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hotspot-aggregator

ClawHub CLI

Package manager switcher

npx clawhub@latest install hotspot-aggregator
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The scripts implement the described functionality (fetching hot lists, generating daily reports, keyword subscriptions). However package.json lists required runtime binaries (curl, jq) while the registry metadata reported 'none' — a mismatch. The code also references a third‑party API (api.oioweb.cn) which is reasonable for a data aggregator but should be considered a non-first-party data source.
Instruction Scope
SKILL.md and the scripts stay within the aggregator/reporting scope: they fetch platform hotlists, write JSON and markdown reports, and search local data for keywords. The scripts reference USE_REAL_API and PROXY environment variables (to enable live network fetches) and will call external endpoints when enabled. Default behavior uses demo data; network calls occur only if USE_REAL_API=true or when fetch is explicitly invoked.
Install Mechanism
There is no install spec and all code is delivered with the skill (shell scripts + JSON). No remote installer or downloaded archives are used, which lowers installation risk.
!
Credentials
The skill uses environment variables (USE_REAL_API, PROXY) but the registry metadata declared no required env vars. The scripts also depend on system binaries (curl, jq) although the metadata showed none — this inconsistency could mislead users about what is required. No secret credentials are requested, which is appropriate for the stated purpose.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global settings. It writes data and reports under the absolute path /root/clawd/memory/hotspots (skill-specific), which is normal for local data storage but worth noting if the platform's shared paths are sensitive.
What to consider before installing
Things to check before installing or running: - Ensure curl and jq are available: the scripts call curl and jq although the skill metadata did not list required binaries. Without them the scripts will fail. - Understand the network behavior: by default the skill uses demo data, but setting USE_REAL_API=true (and optionally PROXY) makes the scripts perform HTTP requests to external endpoints (weibo, baidu, zhihu, and a third‑party aggregator api.oioweb.cn). Only enable live mode if you trust those endpoints and your environment's network/credentials policy. - Review absolute paths: the scripts read/write under /root/clawd/memory/hotspots. Confirm that path is acceptable in your environment and does not overlap with sensitive data or other skills. - Third‑party API trust: api.oioweb.cn is a third‑party aggregator (not an official Douyin endpoint). Evaluate whether you trust that service before enabling real API mode. - Config and notifyChannel: the config.json contains notifyChannel but the scripts do not implement any notification delivery — if you expect push notifications, verify or implement the mechanism safely. - Minimal privileges: run the skill in a sandbox or non-privileged account first to confirm behavior. If you need a higher assurance, inspect network traffic (or run with USE_REAL_API=false) and review the scripts line-by-line — the code is simple shell, so manual review is feasible. Summary: functionally coherent but metadata omissions and network/absolute-path choices are the main concerns; review and test in a limited environment before trusting it in production.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔥 Clawdis
latestvk970x4rb283sg8msq2htkx4sfs8394sn
180downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

🔥 热点聚合监控

一站式聚合全网热搜,让热点触手可及

聚合微博、百度、知乎、抖音四大平台热搜数据,自动生成热点报告,支持关键词订阅。


✨ 核心功能

功能描述
📊 多平台聚合微博热搜、百度热搜、知乎热榜、抖音热搜
📝 每日报告自动生成结构化热点分析报告
🔔 关键词订阅订阅感兴趣的关键词,匹配即推送
📈 趋势分析分析热点分布、变化趋势

🚀 快速开始

安装

clawhub install hotspot-aggregator

获取热点数据

# 获取所有平台热搜
cd skills/hotspot-aggregator
./scripts/fetch-hotspots.sh all

# 获取单个平台
./scripts/fetch-hotspots.sh weibo    # 微博
./scripts/fetch-hotspots.sh baidu    # 百度
./scripts/fetch-hotspots.sh zhihu    # 知乎
./scripts/fetch-hotspots.sh douyin   # 抖音

生成热点报告

# 生成今日报告
./scripts/generate-report.sh

# 报告位置: /root/clawd/memory/hotspots/YYYY-MM-DD.md

关键词订阅

# 添加订阅
./scripts/subscribe.sh add "AI"
./scripts/subscribe.sh add "科技"

# 查看订阅列表
./scripts/subscribe.sh list

# 删除订阅
./scripts/subscribe.sh remove "AI"

# 检测关键词匹配
./scripts/check-keywords.sh

📋 输出示例

热点报告格式

# 🔥 今日热点报告 - 2026-03-20

## 📱 微博热搜 TOP10

1. 两会热点议题 🔥 123万热度
2. AI技术新突破引发热议 💬 98万热度
...

## 🔍 百度热搜 TOP10

1. 最新科技动态 🔥 搜索量: 89万
2. 国际新闻头条 💬 搜索量: 78万
...

## 📊 热点分析

- 🔬 科技类: 35%
- 🎬 娱乐类: 28%
- 📰 社会类: 22%
- 💼 财经类: 10%
- 🎨 其他: 5%

## 🎯 订阅关键词匹配

您订阅的关键词 [AI] 匹配到:
- AI技术新突破 (微博 #2)
- 最新科技动态 (百度 #1)

⚙️ 配置

配置文件 config.json

{
  "platforms": ["weibo", "baidu", "zhihu", "douyin"],
  "reportTime": "08:00",
  "keywords": ["AI", "科技"],
  "notifyChannel": ""
}

启用真实API

默认使用演示数据。要启用真实API:

# 设置环境变量
export USE_REAL_API=true
export PROXY="http://your-proxy:port"  # 可选,如需代理

./scripts/fetch-hotspots.sh all

🔄 定时任务

配合 cron 实现每日自动推送:

# 每天早上8点推送
0 8 * * * cd /root/clawd/skills/hotspot-aggregator && ./scripts/generate-report.sh

📖 使用场景

场景用法
自媒体运营每日获取热点,选题参考
内容创作订阅领域关键词,获取灵感
市场分析追踪行业热点趋势
舆情监控订阅品牌关键词,及时发现舆情

⚠️ 注意事项

  1. API限制: 真实API可能有访问频率限制
  2. 代理需求: 部分平台需要代理访问
  3. 演示模式: 默认使用模拟数据演示功能
  4. 更新频率: 建议每小时最多请求一次

🔧 高级用法

自定义数据源

编辑 scripts/fetch-hotspots.sh 添加新平台:

# 添加新平台
fetch_custom() {
    local url="https://your-api-endpoint"
    local output="$DATA_DIR/custom_${DATE}_${TIME}.json"
    # ... 处理逻辑
}

报告自定义

编辑 assets/report-template.md 自定义报告格式。


📊 数据源

平台API说明
微博weibo.com/ajax/side/hotSearch需登录/代理
百度top.baidu.com/api/board公开API
知乎zhihu.com/api/v3/feed/topstory需代理
抖音api.oioweb.cn (聚合)第三方API

让热点触手可及 🔥

Comments

Loading comments...