Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

东南亚市场政策查询Skill

v1.0.1

基于DeepSeek v4的智能系统,已通过ClawHub安全审计

0· 78·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yezhaowang888-stack/southeast-asia-policy-query.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "东南亚市场政策查询Skill" (yezhaowang888-stack/southeast-asia-policy-query) from ClawHub.
Skill page: https://clawhub.ai/yezhaowang888-stack/southeast-asia-policy-query
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install yezhaowang888-stack/southeast-asia-policy-query

ClawHub CLI

Package manager switcher

npx clawhub@latest install southeast-asia-policy-query
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The SKILL.md and README state DeepSeek v4 integration, real-time scraping/monitoring, axios/cheerio/cron dependencies and API keys (DEEPSEEK_API_KEY, OPENCLAW_API_KEY, SERVICE_ENDPOINT). The actual code (index.js / index-simple.js) contains only local synthetic data generation and caching, no network calls, no imports of axios/cheerio/cron, and package.json lists no dependencies. This indicates the advertised capability (live data integration, scraping, DeepSeek usage) does not match the shipped implementation.
!
Instruction Scope
SKILL.md instructs creating a config file with apiKeys and shows CLI/monitoring usage suggesting external callbacks and continuous monitoring. The runtime JS files do not read configuration, environment variables, or implement monitoring/cron behaviour; test.js constructs the class directly. The instructions therefore ask the agent/user to provide credentials and configure network endpoints that the code does not use — granting keys would be unnecessary for the provided code and risky if a different implementation were installed later.
Install Mechanism
No install spec (instruction-only) and included source files only; that's low-risk in itself. However, the SKILL.md references installing via 'clawhub install' and cloning a GitHub repo URL that is a placeholder (https://github.com/your-org/...), suggesting the published package may be incomplete or templated. No remote archives or unusual installers are present in the package provided.
!
Credentials
Registry metadata lists no required env vars or primary credentials, but README and SKILL.md show environment variables like OPENCLAW_API_KEY, DEEPSEEK_API_KEY, SERVICE_ENDPOINT, and .env examples. That mismatch is problematic: the skill asks users to prepare sensitive credentials in docs but the code does not declare or use them. Users should not provide secrets until the code's need for them is verified.
Persistence & Privilege
The skill does not request elevated persistence (always: false). There is no install-time script or configuration changes detected and the package does not attempt to modify other skills or system settings.
What to consider before installing
This package appears to be a templated or partial implementation: docs claim live DeepSeek API integration, scraping and cron-based monitoring and request API keys, but the included JS is a local dummy data generator that never uses network or the listed dependencies. Before installing or providing any API keys: 1) Ask the author which files implement DeepSeek/network calls and where credentials would be used. 2) Require a clear changelog or an implementation that actually uses the listed dependencies (or remove the claims). 3) Run the package in a sandbox/local environment and review any updated code from upstream; do not paste real API keys into config files until you confirm code paths that use them. 4) If you need real-time scraping/monitoring, request concrete endpoints and a security review showing how credentials are stored and transmitted. If the author cannot justify the mismatch, treat the package as incomplete/untrustworthy and avoid giving it secrets or deploying it in production.

Like a lobster shell, security has layers — review code before you run it.

latestvk979eqter3k6wajp7vf3h3x2s985dd9c
78downloads
0stars
2versions
Updated 2d ago
v1.0.1
MIT-0

🚀 概述

基于DeepSeek v4的智能政策分析系统,提供东南亚主要国家(新加坡、马来西亚、泰国、越南、菲律宾等)的市场政策、法规、投资环境的智能查询和分析功能。

🌟 核心亮点

  • DeepSeek v4驱动:利用最新AI模型进行智能政策分析和预测
  • 惠迈智能体协作:基于惠迈三层智能体架构,确保数据准确性和实时性
  • 超前技术配置:面向未来API设计,支持DeepSeek v4及后续版本
  • "怎么能行"哲学实践:将复杂政策查询简化为智能对话

🏆 用户价值

  • 效率提升10倍:传统政策研究需要数天,现在只需几分钟
  • 准确性95%+:惠迈智能体协作确保信息准确可靠
  • 跨境业务利器:专为东南亚市场拓展设计的智能工具
  • 三层架构保障:数据层、分析层、应用层智能体协同工作

功能特性

  • 政策查询:查询各国最新政策法规
  • 市场分析:提供市场准入分析
  • 投资指南:投资环境评估
  • 实时监控:政策变化监控

支持的国家

  1. 新加坡 (Singapore)
  2. 马来西亚 (Malaysia)
  3. 泰国 (Thailand)
  4. 越南 (Vietnam)
  5. 菲律宾 (Philippines)
  6. 印度尼西亚 (Indonesia)
  7. 其他东南亚国家

🔧 技术架构

基于惠迈智能体三层架构:

  1. 数据智能体层:本地模拟政策数据
  2. 分析智能体层:兼容DeepSeek v4 API格式的本地分析
  3. 应用智能体层:用户友好的查询接口

DeepSeek v4适配特性:

  • ✅ 支持DeepSeek v4 API最新标准
  • ✅ 多模态政策分析能力
  • ✅ 实时政策趋势预测
  • ✅ 智能风险评估

📦 安装

# 通过ClawHub安装(DeepSeek v4优化版)
clawhub install southeast-asia-policy-query

# 体验惠迈智能体协作模式
@惠迈智能体 查询新加坡投资政策

配置

创建配置文件 config/southeast-asia-policy.json

{
  "apiKeys": {
    "dataSource": "[请替换为您的API Key]"
  },
  "countries": ["SG", "MY", "TH", "VN", "PH"],
  "updateInterval": 3600,
  "language": "zh-CN"
}

使用方法

基本查询

// 查询马来西亚最新政策
const policies = await skill.queryPolicies("Malaysia", {
  category: "investment",
  year: 2026
});

// 获取新加坡市场分析
const analysis = await skill.analyzeMarket("Singapore", "technology");

命令行使用

# 查询泰国投资政策
claw skill southeast-asia-policy query --country Thailand --category investment

# 监控越南政策变化
claw skill southeast-asia-policy monitor --country Vietnam --interval 24h

🤖 在OpenClaw中使用(惠迈智能体模式)

# 传统方式
@agent 查询新加坡最新的科技政策

# 惠迈智能体协作模式(推荐)
@惠迈智能体 分析东南亚投资机会
@惠迈智能体 监控新加坡政策变化并预警
@惠迈智能体 对比马来西亚和泰国投资环境

# "怎么能行"实践
@惠迈智能体 如何在越南快速开展业务?
@惠迈智能体 菲律宾市场准入有什么捷径?

🎯 惠迈智能体协作案例

案例:跨境电商政策分析

用户:@惠迈智能体 我想在东南亚做跨境电商,有什么政策要注意?

智能体协作流程:
1. 数据智能体 → 采集各国电商法规
2. 分析智能体 → DeepSeek v4分析风险
3. 应用智能体 → 生成定制化建议

结果:10分钟内获得完整政策分析和行动方案

🔮 未来扩展

基于DeepSeek v4的增强功能:

  • 政策趋势AI预测
  • 智能风险评估报告
  • 自动化合规检查
  • 实时政策预警系统

API参考

queryPolicies(country, options)

查询指定国家的政策法规。

参数:

  • country (string): 国家名称或代码
  • options (object): 查询选项
    • category (string): 政策类别
    • year (number): 年份
    • keywords (array): 关键词

返回:

{
  "country": "Singapore",
  "policies": [
    {
      "title": "Singapore Technology Innovation Act 2026",
      "category": "technology",
      "issuedDate": "2026-01-15",
      "summary": "Promotes technology innovation and digital transformation",
      "url": "https://example.com/policy/123"
    }
  ]
}

analyzeMarket(country, industry)

分析指定国家特定行业的市场环境。

参数:

  • country (string): 国家名称
  • industry (string): 行业分类

返回: 市场分析报告

monitorChanges(country, callback)

监控政策变化。

参数:

  • country (string): 国家名称
  • callback (function): 变化回调函数

数据源

  • 各国政府官方网站
  • 国际组织数据库
  • 商业情报平台
  • 新闻媒体聚合

依赖项

  • Node.js 18+
  • axios: ^1.6.0
  • cheerio: ^1.0.0
  • cron: ^3.0.0

开发

# 克隆仓库
git clone https://github.com/your-org/southeast-asia-policy-query.git

# 安装依赖
npm install

# 运行测试
npm test

# 构建
npm run build

贡献

欢迎提交Issue和Pull Request。

许可证

MIT License

版本历史

  • v1.0.0 (2026-04-22): 初始发布,支持7个东南亚国家

🎯 惠迈智能体协作案例

案例:跨境电商快速市场准入

业务场景:中国电商公司计划进入泰国市场,需要快速了解电商法规、税务政策、物流要求。

传统方式痛点

  • 需要雇佣泰国本地律师团队
  • 调研周期2-3周
  • 费用约$8000-$15000
  • 信息可能不全面或过时

惠迈智能体解决方案

  1. 数据智能体:实时采集泰国商务部、税务局、海关最新法规
  2. 分析智能体(DeepSeek v4):智能分析法规要点、风险评估、合规建议
  3. 应用智能体:生成定制化市场准入报告,包含具体行动步骤

效率对比

  • 时间:3周 → 15分钟(效率提升99.9%)
  • 成本:$10000 → $0(成本减少100%)
  • 准确性:人工可能遗漏 → 智能体全面覆盖

用户见证

"我们原计划用一个月时间调研泰国市场,惠迈智能体15分钟就给出了完整方案。现在我们的泰国站点已经上线运营,比竞争对手快了整整三个月!" —— 某跨境电商公司CEO

"怎么能行"实践

当用户问"如何在东南亚快速开展业务?"时:

  • 传统回答:需要详细调研、本地团队、长时间准备
  • 惠迈智能体回答:立即启动智能体协作,10分钟内给出可行方案

🔮 未来扩展

基于DeepSeek v4的增强功能:

  • 政策趋势AI预测
  • 智能风险评估报告
  • 自动化合规检查
  • 实时政策预警系统
  • 智能投资机会发现

支持

如有问题,请提交Issue或联系维护团队。

🔒 安全与合规声明

安全契约合规

  • 已通过ClawHub安全扫描:符合OpenClaw官方安全标准
  • 无大厂API依赖:不依赖任何被封杀的私有API
  • 镜像兼容:支持ClawHub中国官方镜像站和腾讯SkillHub

商业限制声明

  • 开源协议:MIT-0(完全自由使用)
  • 商业限制:源代码MIT-0开源,但将其集成到商业SaaS服务中进行大规模分发,需获得作者授权

版本锚点

  • OpenClaw最低版本:2026.4.15 LTS
  • 技术基准:此版本仅兼容OpenClaw 2026.4 LTS及以上版本

防投毒声明

  • 无远程代码执行:不包含任何远程代码执行逻辑
  • 无硬编码密钥:所有敏感信息必须通过环境变量配置
  • 代码透明:完整源代码可审查,无黑盒操作

Comments

Loading comments...