📦 Kuaishou Comment Analysis — 舆情快评
v1.0.0一键抓取快手视频评论，秒算正负情感占比，提炼热词与观众画像，帮你快速掌握口碑风向。
0· 98·0 当前·0 累计
by 下载技能包
最后更新
2026/3/31
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill delegates analysis to a third-party service (ai-skills.ai) and will send the user-supplied video link and your AISKILLS_API_KEY to that domain. Before installing: (1) Confirm you trust ai-skills.ai (privacy policy, data retention, and security practices). (2) Fix or confirm the registry metadata mismatch — SKILL.md requires AISKILLS_API_KEY even though metadata omitted it. (3) Use a revocable / limited-scope API key and monitor its usage; consider creating a dedicated key/account for ...详细分析 ▾
ℹ 用途与能力
Skill name and description (Kuaishou comment sentiment analysis) match the runtime instructions: it calls ai-skills.ai endpoints to parse a Kuaishou link and run an analysis task. However, the registry metadata provided with the skill lists no required environment variables or primary credential, while SKILL.md clearly declares and uses AISKILLS_API_KEY. This metadata mismatch is an administrative inconsistency you should resolve before trusting the package metadata.
ℹ 指令范围
SKILL.md instructs the agent to POST the user-supplied video link to ai-skills.ai (parse-link) and to create/poll analysis tasks using X-API-Key. All network calls are limited to ai-skills.ai and are consistent with the advertised functionality. The instructions do explicitly transmit the user's video URL and the API key to a third party — there are no other file reads, arbitrary shell execution, or references to unrelated system paths.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files. That minimizes risk from arbitrary code installs or extracted archives.
⚠ 凭证需求
The skill requires a single third-party API key (AISKILLS_API_KEY) which is exactly what the described HTTP calls need. However, the registry metadata did not declare this required credential (contradiction). Also note the API key will be sent in requests to ai-skills.ai (SKILL.md documents this). Requiring one API key is proportionate, but sending user data and a credential to a third party is a privacy/credential-exposure concern you must accept explicitly.
✓ 持久化与权限
The skill does not request always:true, does not install persistent components, and does not modify other skills or system-wide configs. It runs only via HTTP calls described in SKILL.md.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/31
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install kuaishou-sentiment-dashboard
镜像加速npx clawhub@latest install kuaishou-sentiment-dashboard --registry https://cn.longxiaskill.com镜像同步中