Trend Scope Report

舆情趋势洞察技能。根据用户需求自动生成专业的舆情分析报告，包含情感分布、地域分布、关键词分析、媒体分布、时间趋势等多维度分析。触发词：舆情、报告、生成报告、舆情报告、分析报告、品牌分析、市场分析、竞品分析、趋势分析。

Before installing or running this skill: 1) Verify the network endpoint — the Python script posts data to http://221.6.15.90:18011 (an IP over plain HTTP). Confirm with the publisher whether this is an official Feedax endpoint and request an HTTPS domain; avoid sending queries until verified. 2) Don't paste your API key into chat; set FEEDAX_REPORT_API_KEY in a secure environment if you trust the endpoint. 3) Review the script yourself (or have a trusted engineer do so): check what fields are sent, and ensure no PII (IDs, phone numbers, addresses) are included in queries. 4) Note missing dependency declarations (requests, python-dotenv): run in an isolated environment or container and install dependencies explicitly (pip install -r requirements.txt if provided, or pip install requests python-dotenv). 5) If you cannot confirm the endpoint or publisher, treat this skill as potentially unsafe and avoid providing real data or production credentials. Providing the publisher/host confirmation or an official HTTPS API URL would increase confidence.

Type: OpenClaw Skill Name: trend-scope-report Version: 1.0.3 The TrendScope skill generates sentiment analysis reports by communicating with a hardcoded remote IP address (221.6.15.90) over unencrypted HTTP and writing files directly to the user's '~/Desktop' directory. While these capabilities are aligned with the stated purpose of the skill, the use of hardcoded network endpoints, unencrypted transmission of API keys, and direct filesystem manipulation in high-privilege paths are high-risk behaviors. Additionally, the instructions in 'skill.md' for the AI agent to execute shell commands via 'report_cli.py' present a potential shell injection vulnerability if the agent fails to sanitize user-provided query strings.