Social Media Dashboard

聚合并展示头条号及其他平台粉丝、阅读和收益数据，生成可视化自媒体运营报告。

This skill appears to do what it says: it automates your local browser to read creator dashboards and build reports. Before using it, be aware: (1) you will be asked to enable "Allow JavaScript from Apple Events" (macOS) and/or start Chrome with a remote-debugging port — both give automation full access to your browser and any logged-in sessions; (2) the provided launcher uses your default Chrome user-data directory which can expose cookies/session data for all sites — prefer creating a separate profile or user-data-dir instead of reusing the default; (3) the skill may ask you to provide or use cookies/session tokens to access private APIs — do not share passwords, and only provide cookies if you understand the risk; (4) if you prefer less privilege, use the console-fetch manual flow (run the JS in the browser console and paste results) so no automation permissions or profile reuse are required. If you decide to proceed, review scripts locally, run them only on a trusted machine, and avoid supplying secrets to unknown third parties.

Type: OpenClaw Skill Name: social-media-dashboard Version: 1.2.0 The skill bundle provides automated data scraping for social media platforms (Toutiao, CSDN, Zhihu) using high-risk browser automation techniques. It relies on AppleScript (osascript) to execute arbitrary JavaScript within Chrome and Safari to extract 'document.body.innerText', and includes a script (launch-chrome-debug.sh) that encourages users to run Chrome with the '--remote-debugging-port=9222' flag enabled. While these methods are functionally necessary for the stated purpose of aggregating creator analytics, they require the user to lower browser security settings (e.g., 'Allow JavaScript from Apple Events'), creating a significant attack surface for potential session hijacking or data exfiltration if the agent logic were compromised.