← 返回 Skills 市场
yadavabhijeet4

golden-rule

作者 yadavabhijeet4 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
311
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install golden-rule
功能描述
Automates the "Golden Hour" Instagram engagement hack. Use this skill when a user wants to set up a bot that watches an Instagram Reel/Post for a specific ke...
使用说明 (SKILL.md)

Golden Hour Automator

This skill provides the script and instructions needed to run a comment-to-DM automation on Instagram. It is designed to boost engagement in the critical first hour (the "Golden Hour") after a post goes live.

Prerequisites

The user must have:

  1. An Instagram Professional/Business account linked to a Facebook Page.
  2. A Long-Lived Instagram Graph API Page Access Token (IG_ACCESS_TOKEN).
  3. Their Instagram Business Account ID (IG_ACCOUNT_ID).

Ensure these are set in the environment or .env file before running the script.

Usage

When a user asks to monitor a post for a keyword and send a DM, run the included ig_golden_hour.py script.

uv run {baseDir}/scripts/ig_golden_hour.py \
    --media_id "12345678901234567" \
    --keyword "bot" \
    --dm_text "Here is the link you requested: https://example.com" \
    --duration 60

Parameters:

  • --media_id: The ID of the specific Instagram post/Reel to monitor. (You may need to query the Graph API me/media endpoint to find this for the user's latest post).
  • --keyword: The trigger word the script watches for in the comments (case-insensitive).
  • --dm_text: The exact message to send to the user's DMs.
  • --duration: How many minutes the script should stay alive and monitor the post (default is 60).

What the Script Does:

  1. Polls the comments of the specified media_id every 2 minutes.
  2. If it finds the --keyword, it sends the --dm_text directly to the commenter's inbox using the Meta me/messages endpoint.
  3. It posts a public reply to the comment ("Just sent you a DM with the link! 🚀") to double the post's comment count and boost algorithmic reach.
  4. It sends a success notification back to OpenClaw via the openclaw message CLI.
安全使用建议
This skill implements the claimed Instagram automation, but it contains several coherence issues you should resolve before using it: 1) The package metadata does not declare required environment variables (IG_ACCESS_TOKEN, IG_ACCOUNT_ID) or the Python dependency 'requests' even though the script needs them — treat missing declarations as a sign you must manually review/prepare the environment. 2) The script calls the local 'openclaw' CLI to send notifications; ensure that CLI is present and you trust it, or remove that call if you don't want outbound notifications. 3) There is a prompt-injection indicator (unicode-control-chars) in SKILL.md — inspect the file for hidden characters or manipulative content. 4) Use a dedicated test Instagram Business account and a token with the minimum scope required, and do not run this against accounts you care about until you’ve tested it. 5) Consider adding an explicit install step (pip install requests) in a controlled virtualenv, verify the script source line-by-line, and confirm compliance with Instagram/META terms (automated engagement can violate platform policies). If you cannot validate these points, do not install or run the skill.
功能分析
Type: OpenClaw Skill Name: golden-rule Version: 1.0.0 The skill implements an Instagram engagement bot using the Meta Graph API and requires sensitive credentials (IG_ACCESS_TOKEN). It is classified as suspicious due to the use of os.system for shell execution in ig_golden_hour.py, which is a high-risk practice (potential shell injection vector), and the inclusion of hardcoded strings ('Mock Trading DM') that do not align with the script's dynamic parameters, suggesting potential copy-paste from other contexts or unintended behavior.
能力评估
Purpose & Capability
The script and SKILL.md implement an Instagram comment->DM automation which aligns with the described 'Golden Hour' engagement hack. However the registry metadata claims no required environment variables or binaries while the script explicitly needs IG_ACCESS_TOKEN and IG_ACCOUNT_ID and the SKILL.md suggests using a .env — this mismatch is unexpected and reduces trust.
Instruction Scope
SKILL.md instructs the agent/operator to run the provided script and set IG_ACCESS_TOKEN and IG_ACCOUNT_ID. It also instructs sending a notification back to OpenClaw via the 'openclaw message' CLI. The instructions do not overreach into unrelated system areas, but they implicitly require a local CLI ('openclaw') and posting to an external service (OpenClaw webchat) which are not declared in the skill metadata.
Install Mechanism
This is instruction-only (no install spec) but includes a Python script that declares a dependency on 'requests' in a top comment. The registry provides no install/dependency information, which is inconsistent: the code needs the requests package but there is no install step declared for ensuring that dependency is present.
Credentials
The script legitimately requires IG_ACCESS_TOKEN and IG_ACCOUNT_ID to use the Graph API, which is proportionate to the stated purpose. However the registry metadata lists no required env vars while the SKILL.md and script both require secrets — this mismatch is a red flag. The script also invokes the 'openclaw' CLI (via os.system) which implies another implicit required tool/credential not declared.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:false) and is user-invocable. It runs as a short-lived script for a duration parameter. The only extra privilege is that it calls an external CLI to notify OpenClaw, which could relay runtime events; this is noted but not by itself a high privilege request.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install golden-rule
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /golden-rule 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Golden Hour Automator - Automates Instagram "Golden Hour" engagement by monitoring post comments for a target keyword. - Automatically replies to matching comments and sends a DM to commenters with a customizable message or link. - Runs for a specified time window, polling comments every 2 minutes during the session. - Built for Instagram business accounts using the Graph API access token and account ID. - Includes script and usage instructions for quick setup.
元数据
Slug golden-rule
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

golden-rule 是什么?

Automates the "Golden Hour" Instagram engagement hack. Use this skill when a user wants to set up a bot that watches an Instagram Reel/Post for a specific ke... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 311 次。

如何安装 golden-rule?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install golden-rule」即可一键安装,无需额外配置。

golden-rule 是免费的吗?

是的,golden-rule 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

golden-rule 支持哪些平台?

golden-rule 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 golden-rule?

由 yadavabhijeet4(@yadavabhijeet4)开发并维护,当前版本 v1.0.0。

💬 留言讨论