Skylv Skill Market Analyzer

ClawHub 技能市场数据分析。热门技能追踪、趋势预测、竞品分析、定价策略。Triggers: skill market, clawhub analysis, market trends, competitor analysis, skill pricing.

This skill appears to implement a legitimate ClawHub market analyzer, but before running it you should: 1) confirm the 'clawhub' CLI is installed and trusted (the code calls it via execSync); 2) be aware the scripts assume Windows (process.chdir('C:/') and shell: 'cmd') — running on other OSes will fail or behave unexpectedly; 3) review the two included Node.js files (survey.js and gap.js) yourself — they execute shell commands and write cache/*.json files; 4) run in a sandbox or non-privileged environment (do not run as administrator) until you vet it; 5) if you plan to provide custom search terms or integrate this skill into automation, sanitize inputs or modify the code to avoid shell injection (use child_process execFile or pass args as arrays); and 6) ask the publisher to update metadata to declare the 'clawhub' binary dependency and Windows requirement so the skill's declared requirements match what it actually needs.

Type: OpenClaw Skill Name: skylv-skill-market-analyzer Version: 1.0.3 The skill bundle provides a legitimate set of tools for analyzing the ClawHub marketplace. The core logic is contained in Node.js scripts (survey.js and gap.js) that use the 'clawhub' CLI to gather market data and identify underserved niches. While the scripts use high-privilege functions like execSync and process.chdir('C:/'), their behavior is strictly aligned with the stated purpose of market analysis and data aggregation. The documentation (SKILL.md) provides clear instructions for the AI agent without any evidence of prompt injection or malicious intent. No data exfiltration, persistence mechanisms, or obfuscated payloads were detected.