📦 Brand Identity Analyzer — 品牌身份分析
v1.1.0输入品牌信息，自动生成结构化 JSON 品牌档案，含定位、调性、受众等关键数据；支持档案存储、复用、更新，无缝衔接 Ad-Ready、Morpheus 等创意工作流。
2· 1.9k·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing or running this skill, verify these points: (1) GEMINI_API_KEY is required though the registry says no env vars — only provide API keys you trust and prefer to use a least-privileged key. (2) The SKILL.md mandates pushing generated profiles to a GitHub repo; confirm whether that repo is private and whether you are comfortable committing generated content (which may include scraped images or third-party material). (3) The script depends on google-genai (commented in the file); i...详细分析 ▾
ℹ 用途与能力
The name/description (brand identity analysis) aligns with the included script and SKILL.md: it uses Google-backed Gemini to produce brand JSON and can save profiles for Ad-Ready. However the registry metadata lists no required env vars or credentials while both SKILL.md and scripts require a GEMINI_API_KEY and optionally AD_READY_BRANDS_DIR; that mismatch is an incoherence.
⚠ 指令范围
SKILL.md explicitly instructs the agent to research Google Search/Images and Pinterest and to produce and store JSON profiles. Critically, it mandates pushing every new profile to a GitHub repo (cd ~/clawd/ad-ready; git add; git commit; git push). That push step is treated as non-optional in the docs but no GitHub credentials or remote safety checks are declared. The instructions also require provenance verification of images — which may cause the agent to download/collect external images. These behaviors go beyond simple local analysis and could cause data to be uploaded/shared unintentionally.
ℹ 安装机制
There is no install spec (instruction-only), which minimizes disk writes at install time. The analyze.py file contains header comments indicating a dependency on google-genai, but no automated installer is provided. The absence of an install step is coherent with an instruction-only skill but means the user must install python deps manually; that has operational friction but not immediate risk.
⚠ 凭证需求
The registry declares no required env vars, yet SKILL.md and the script require GEMINI_API_KEY and optionally use AD_READY_BRANDS_DIR. Furthermore, the mandatory GitHub push requires the user's git credentials to be present and used — that credential access is not declared. Requesting a general-purpose API key and implicitly relying on a user's git auth without declaring them is disproportionate and opaque.
ℹ 持久化与权限
The skill does write brand JSON to a path under the user's home by default (~/clawd/ad-ready/configs/Brands). always:false (not force-installed) and it does not declare autonomous always-on privileges. Still, the non-optional workflow step to push to a remote git repo increases persistence and blast radius: generated profiles are expected to be stored in a repo (potentially public) every time a new profile is made.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/5
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install brand-identity-analyzer
镜像加速npx clawhub@latest install brand-identity-analyzer --registry https://cn.longxiaskill.com