by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent and low-risk because it is instruction-only and asks for no credentials or installs. Before installing, confirm where the /api/audience/analyze requests will be sent (who hosts the API) and review that API's privacy/security (the skill expects user_behavior_data which can include personal data). Also note the package has no homepage or source record — if you need provenance, ask the publisher for API documentation, expected request/response schemas, and a...详细分析 ▾
✓ 用途与能力
Name/description (audience analysis) matches the declared inputs (content_ids, user_behavior_data, time_range) and the single API endpoint (/api/audience/analyze). There are no unrelated environment variables, binaries, or install steps.
✓ 指令范围
SKILL.md only describes expected inputs, outputs, and a single POST API path. It does not instruct reading unrelated files, accessing system paths, or exfiltrating secrets. It references 'see API documentation' for data shape but otherwise stays on-topic.
✓ 安装机制
No install spec and no code files — instruction-only means nothing will be written to disk or fetched at install time. This is the lowest-risk install posture.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The inputs it expects (user_behavior_data, content_ids) are proportional to audience-analysis functionality.
✓ 持久化与权限
always is false and the skill does not request persistent system privileges or to modify other skills. Autonomous invocation is allowed (platform default) but not combined with other red flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/21
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install audience-analysis
镜像加速npx clawhub@latest install audience-analysis --registry https://cn.longxiaskill.com