ClawHub

微博热点

v0.1.0

用于拉取并展示微博热点内容（接口为 https://hotspot.api4claw.com/hotspots/platform/微博?timestamp=$TIME_STEMP，返回 JSON 数组）。默认会提示用户创建定时任务（不自动执行），在用户确认后提供 cron 注册命令。适用于用户查询微博热点、服务状...

⭐ 0· 81·0 current·0 all-time
by@xltang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe fetching Weibo hotspot data and the SKILL.md only requires calling https://hotspot.api4claw.com/hotspots/platform/微博 with a minute-level timestamp and grouping results by source_name — all declared and coherent with the stated purpose.
✓
Instruction Scope
Runtime instructions are narrowly scoped: generate a minute-level timestamp, use the web_fetch tool to call the single hotspot endpoint, parse JSON, and present grouped titles. The file explicitly forbids caching, fabricating data, calling other endpoints, or exposing secrets. The cron suggestion is optional and requires explicit user confirmation.
✓
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk and there are no third-party packages or download URLs to evaluate.
✓
Credentials
The skill requires no environment variables or credentials. The only external access is to the single hotspot API URL (declared). The suggested use of an 'openclaw cron' command is optional and does not require secrets. No unrelated credentials or paths are requested.
✓
Persistence & Privilege
always is false. The skill does not request permanent presence or system-level changes by default and explicitly disallows automatic file writes or cron creation without user approval. Autonomous invocation by the agent is allowed (platform default) but not elevated by the skill itself.
Assessment
This skill appears internally consistent: it only calls a single external API and asks for no secrets. Before installing, confirm you trust the endpoint https://hotspot.api4claw.com (it will receive a timestamp each time the skill runs), and be aware that enabling the optional cron will schedule repeated external requests — only approve scheduling if you want automated polling. If you need the agent to run scheduled jobs, ensure the scheduled environment has the same skill available and review any generated cron command before execution.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c8yf5debv9v0ccs1q20cwqx84khr8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments