← Back to Skills Marketplace
Elon马斯克情报内参
by
xqw1377-prog
· GitHub ↗
· v1.0.10
431
Downloads
0
Stars
2
Active Installs
12
Versions
Install in OpenClaw
/install musk-insider-pro
Description
实时追踪Elon Musk及其企业动态，提供每日AI生成的投资情报摘要和市场影响分析。
Usage Guidance
Do not install or enable this skill without clarification. Questions and actions to consider before proceeding:
- Ask the publisher to explain why the codebase includes two entry files (bare.py and main.py) and which one is intended to run.
- Require removal of hard-coded credentials (SKILLPAY_API_KEY) and rotation of that key if it is real; secrets must be provided via environment variables and declared in metadata.
- Verify the skill's source and homepage; source is unknown and the package claims capabilities (real-time tracking, AI analysis) that are not implemented.
- If you still want to test, run it in a sandboxed environment with restricted network access and monitor outbound traffic to ensure it doesn't contact unexpected endpoints.
- Prefer a version with reproducible provenance, no embedded secrets, and documentation that matches the actual runtime behavior.
Capability Analysis
Type: OpenClaw Skill
Name: musk-insider-pro
Version: 1.0.10
The skill bundle contains a hardcoded API key (sk_8b36c2ca...) in main.py, which is a significant security vulnerability. While the code aligns with its stated purpose of providing a demo for a payment-gated news service (linking to https://pay.skillpay.me), the inclusion of credentials and the aggressive port-probing logic in bare.py are risky behaviors. No clear evidence of intentional malware, such as data exfiltration or backdoors, was detected.
Capability Assessment
Purpose & Capability
The description promises real-time tracking of Elon Musk and AI-generated investment intelligence, but the provided runtime behavior is a minimal demo HTTP service that returns static example JSON and a sample payment link. The shipped code does not implement scraping, data feeds, or model inference, so the implementation is inconsistent with the claimed purpose.
Instruction Scope
SKILL.md instructs running bare.py and documents simple endpoints, which matches bare.py. However there is a second service file (main.py) not referenced by SKILL.md; main.py contains a hard-coded SKILLPAY_API_KEY and FastAPI endpoints. The presence of an unreferenced file with a secret expands the runtime surface beyond the documented instructions.
Install Mechanism
No install spec (instruction-only) — lowest install risk. A requirements.txt lists fastapi and uvicorn which are unnecessary for the documented entrypoint (bare.py) but required by main.py. This mismatch suggests leftover or alternate runtime expectations.
Credentials
requires.env lists none, yet main.py contains a hard-coded SKILLPAY_API_KEY (sensitive credential) baked into source. The skill both exposes a secret in-repo and fails to declare any credential usage, which is disproportionate and risky (possible leakage or misuse).
Persistence & Privilege
The skill is not set to always:true and is user-invocable. It runs an HTTP server bound to configured ports (reads many common PORT env names) which is expected for an HTTP skill. No other privileged platform modifications are present.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install musk-insider-pro - After installation, invoke the skill by name or use
/musk-insider-pro - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.11
No changes detected in this version.
- No file or documentation changes were made.
- Functionality and interfaces remain the same as the previous release.
v1.0.10
- 更新运行指令为 `python bare.py`
- 启动时，若无端口变量，新增对 8080/8000/3000 多端口的自动监听支持
v1.0.9
- Updated startup command to use `bare.py` instead of `main.py`
- Changed default listening port from 8000 to 8080
- Improved environment variable wording for custom port detection
v1.0.8
Version 1.0.8
- Removed the file serve.py to simplify the codebase.
- No changes to interfaces or documentation content.
v1.0.7
MuskInsider Pro v1.0.7
- Added bare.py, likely providing a minimal or foundational version of the service.
- No changes to documented features or APIs.
v1.0.6
No changes detected in this version. This update does not include any code or documentation changes.
v1.0.5
- Added serve.py to the project.
- No changes to existing features or interfaces.
v1.0.4
Version 1.0.4 of MuskInsider Pro
- No user-facing changes in this release.
- No file or documentation changes detected.
v1.0.3
- No user-facing changes; version bump only.
- No updates to SKILL.md or source code detected.
- All existing features and documentation remain unchanged.
v1.0.2
- Added requirements.txt to define and manage Python package dependencies.
v1.0.1
No user-facing changes in this version.
No file changes detected; functionality and documentation remain the same.
v1.0.0
Initial release of MuskInsider Pro.
- Real-time monitoring of Elon Musk and related companies (Tesla, SpaceX, xAI, X) activities.
- Daily AI-generated intelligence summaries from tweets and news.
- Market impact analysis for related cryptocurrencies and stocks.
- Integrated SkillPay 0.01U payment for unlocking in-depth reports.
- Free daily briefing available via the /invoke endpoint.
Metadata
Frequently Asked Questions
What is Elon马斯克情报内参?
实时追踪Elon Musk及其企业动态，提供每日AI生成的投资情报摘要和市场影响分析。 It is an AI Agent Skill for Claude Code / OpenClaw, with 431 downloads so far.
How do I install Elon马斯克情报内参?
Run "/install musk-insider-pro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Elon马斯克情报内参 free?
Yes, Elon马斯克情报内参 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Elon马斯克情报内参 support?
Elon马斯克情报内参 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Elon马斯克情报内参?
It is built and maintained by xqw1377-prog (@xqw1377-prog); the current version is v1.0.10.
More Skills