渠道与版本分析查询
v1.1.0友盟 App 渠道/版本分析 skill。当用户想了解各渠道或版本表现对比、单个渠道/版本的趋势时使用。触发词：渠道分析、版本分析、渠道对比、版本对比、哪个渠道、哪个版本、渠道排名、版本表现。
⭐ 0· 61·0 current·0 all-time
byUmeng+@squall0925
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the included Python SDK and the entry script (scripts/channel_version.py). The included aop/Umeng SDK files and CLI parameter mappings are appropriate for querying Umeng app channel/version metrics.
Instruction Scope
SKILL.md instructs running scripts/channel_version.py and describes a config precedence that may read umeng-config.json or environment variable UMENG_CONFIG_PATH. That is reasonable for this purpose, but the SKILL.md references an environment variable (UMENG_CONFIG_PATH) even though requires.env is empty in registry metadata — the runtime may read local files or that env var to obtain credentials. The SKILL.md does not instruct reading unrelated system files or sending data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill with bundled Python code). No remote downloads or installers are requested. The code is provided in-repo (Umeng SDK + script) so nothing will be downloaded during install.
Credentials
The skill does not declare required env vars but expects configuration via --config, UMENG_CONFIG_PATH, or a local umeng-config.json. That config will likely contain Umeng appkey/secret which are proportional to the skill's function. Users should ensure they provide only the Umeng credentials (appkey/secret) required for the queries and not reuse high-privilege or unrelated secrets.
Persistence & Privilege
always is false. The skill does not request permanent/force inclusion or elevated platform privileges. It will run the provided script when invoked; no behavior suggests it modifies other skills or system-wide settings.
Assessment
This skill appears coherent: it bundles an Umeng OpenAPI Python SDK and a CLI script for channel/version analysis and expects an Umeng config file (appkey/secret). Before enabling: (1) open and review scripts/channel_version.py to confirm it only calls Umeng endpoints and logs/returns expected metrics; (2) ensure the umeng-config.json you provide contains only the minimal Umeng app credentials (do not reuse AWS/GitHub/other tokens); (3) if you allow the agent to invoke skills autonomously, be aware this skill can query your Umeng data when run. If you want extra assurance, run the script in a sandboxed environment with a test/least-privilege Umeng account first.Like a lobster shell, security has layers — review code before you run it.
latestvk970f68vvv1myne36qpc1zpbnh84x7wf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.