Omni Channel Agent

全渠道选品 Agent — 拉齐社媒端、SEO端、投放端数据，帮助运营同学确定待上线需求。触发词：选品、社媒热点、SEO调研、竞品广告、Facebook Ads、TikTok趋势。

This skill appears to implement the scraping and reporting it advertises, but before installing or running it: 1) Expect to provide at least APIFY_TOKEN and SEMRUSH_API_KEY (and optionally a Notion token) — do not supply production or highly privileged keys; use scoped or throwaway credentials where possible. 2) The registry metadata failing to list required env vars is an inconsistency — ask the publisher to correct it. 3) SKILL.md includes guidance (remove SIM, use proxies, create region accounts) that encourages bypassing platform/geolocation protections; consider legal and ToS risks and avoid following those steps if they would violate policies. 4) Inspect SKILL.md for hidden/control characters (the scanner found unicode-control-chars) and review code (apify_client.py, sources/*) yourself or in a sandbox before running. 5) Run first in an isolated environment, with limited API tokens and review the output files, and if you rely on this for business decisions, have a human validate trends (the skill itself states human judgment is required).

Type: OpenClaw Skill Name: omni-channel-agent Version: 1.0.0 The skill bundle is a comprehensive data-gathering tool for social media, SEO, and advertising trends. It is classified as suspicious because several core scripts (e.g., run_pipeline.py, run_all.py, and sources/seo_pipeline.py) include a function to read and parse the user's ~/.bashrc file to retrieve API tokens. Furthermore, sources/google_trends.py uses os.system to automatically install the 'pytrends' package if it is missing. While these actions appear to facilitate the tool's intended scraping functionality, they represent intrusive file access and risky system modifications that could be exploited or lead to unintended system changes.