Qq — 技能工具
v0.1.0提取并总结 public QQ app pages, announcements, and group invites 无需登录或消息访问权限.
0· 303·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's instructions and requirements are consistent with its stated purpose of extracting and summarizing publicly accessible QQ pages; there are no overtly disproportionate permissions or installs requested, but a few operational gaps (rendering dependency and runtime behavior) merit attention before use.
评估建议
This skill appears coherent for scraping and summarizing public QQ pages, but check these operational points before installing:
- Runtime rendering: SKILL.md says content is dynamically loaded and requires waiting for rendering. Ensure your agent environment provides an HTML renderer/headless browser (e.g., Puppeteer/Playwright or a browser tool). The skill does not declare this dependency.
- Rate limits & robots: Implement rate-limiting and respect QQ's robots/terms of service to avoid blockin...详细分析 ▾
✓ 用途与能力
Name/description (extract/summarize public QQ pages, announcements, group invites) match the SKILL.md content. The skill only targets public pages and explicitly disclaims login/message access, which aligns with the declared purpose.
ℹ 指令范围
SKILL.md instructs fetching public share pages, extracting title/author/time/body/tags, and waiting for dynamic rendering. It does not ask the agent to read unrelated files or environment variables and warns about frequency control. However, it relies on the ability to render dynamic content (e.g., a headless browser) but does not state or require any specific runtime capabilities or binaries — this is an operational omission rather than a malicious instruction.
✓ 安装机制
Instruction-only skill with no install spec, packages, or external downloads. This is low-risk; nothing is written to disk by the skill itself.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. That is proportionate for a scraper of public pages. There are no unrelated credentials requested.
✓ 持久化与权限
The skill does not request always:true or any elevated persistent privileges. Default autonomous invocation is allowed (platform default) and is not by itself a concern here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/16
Initial release of qq-hot-trend skill. - Registers a QQ skill focused on extracting and summarizing information from publicly accessible QQ pages. - Supports extraction of titles, authors, update times, summaries, and metadata from public bulletin, app, and group invite pages. - Does not support login, messaging, or access to private/protected content. - Automates content parsing only for public, shareable QQ links; follows platform security and access guidelines.
● 无害
安装命令 点击复制
官方npx clawhub@latest install qq-hot-trend
镜像加速npx clawhub@latest install qq-hot-trend --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制