Octolens

Query and analyze brand mentions from Octolens API. Use when the user wants to fetch mentions, track keywords, filter by source platforms (Twitter, Reddit, GitHub, LinkedIn, etc.), sentiment analysis, or analyze social media engagement. Supports complex filtering with AND/OR logic, date ranges, follower counts, and bookmarks.

The skill's code matches its description — it only queries https://app.octolens.com/api/v1 and prints results — but the package metadata failing to declare the required API credential is a red flag. Before installing: - Verify the Octolens service and domain (app.octolens.com) are legitimate and that you trust the publisher (no homepage or known owner is listed). - Provide an API key only when necessary and consider creating a key with limited scope/permissions and an expiration if the service supports it. - Prefer passing the API key as a command-line argument or ephemeral prompt rather than storing it permanently in agent config; confirm how your agent stores secrets. - Review the included scripts yourself (they are short and readable) to confirm there are no hidden endpoints or telemetry; the provided files only contact the documented API. Because the metadata does not declare the required credential, treat this skill as suspicious until you confirm the publisher and how API keys will be handled/stored.

Type: OpenClaw Skill Name: octolens Version: 1.0.0 The skill bundle provides a legitimate client for the Octolens API. The `SKILL.md` instructions guide the AI agent on how to interact with the API, including handling API keys and constructing queries, without any evidence of prompt injection attempting to manipulate the agent into malicious behavior. The Node.js scripts (`scripts/*.js`) are straightforward API clients, making requests only to the documented `https://app.octolens.com/api/v1` endpoint, and do not attempt to access sensitive local files, exfiltrate data, or execute arbitrary code. The `allowed-tools: Node Read` permission is appropriate for executing the bundled Node.js scripts.