← 返回 Skills 市场
competitive-intel
作者
Meir Kadosh
· GitHub ↗
· v1.0.0
· MIT-0
105
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install market-intel
功能描述
Real-time competitive intelligence and market research using Bright Data's web scraping infrastructure. Analyzes competitors' pricing, features, reviews, hir...
安全使用建议
This skill tells the agent to install and run Bright Data's CLI and to execute many shell commands, but it does not declare that credentials or helper tools are needed — that mismatch is concerning. Before installing or enabling this skill: 1) Don't run the curl | bash installer blindly — review the installer script and prefer manual installation or a verified release (checksums/pinned versions). 2) Confirm how Bright Data authentication will be provided and where sensitive tokens will be stored; the skill omits any env vars or config paths. 3) If you allow the agent to run this, sandbox it (restricted account/container) because the agent will perform network I/O and write files. 4) Verify availability of required CLI utilities (jq, xargs) and whether running 'bdata login' requires interactive credentials you are comfortable providing. 5) Consider using a human-in-the-loop for initial runs to confirm commands and outputs, or ask the skill author to update metadata to declare required binaries and credentials and to provide safer install instructions (pinned releases, checksum verification).
功能分析
Type: OpenClaw Skill
Name: market-intel
Version: 1.0.0
The market-intel skill bundle provides a comprehensive framework for competitive research using the Bright Data CLI (bdata). It is classified as suspicious primarily due to the inclusion of a 'curl | bash' installation command in SKILL.md, which is a high-risk execution pattern that could be exploited if the remote source is compromised. While the skill's shell and network capabilities are plausibly required for its stated purpose of web scraping and market analysis, the combination of automated shell execution and broad scraping functionality (as detailed in references/data-source-guide.md) represents a significant risk profile. No evidence of intentional malice, such as credential theft or unauthorized data exfiltration, was found.
能力评估
Purpose & Capability
The skill's stated purpose (competitive intelligence via Bright Data) matches use of a web-scraping CLI, but the metadata claims no required binaries or credentials while the SKILL.md explicitly requires installing and running the Bright Data CLI and using tools like jq/xargs. Declaring 'no env vars / no API keys' contradicts the practical need for Bright Data authentication and any platform credentials.
Instruction Scope
Runtime instructions direct the agent to run remote installer (curl | bash), run bdata commands (search, scrape, pipelines), parallelize shell calls, pipe outputs to jq/xargs, and write output files. The instructions assume access to system shell, network, and interactive login (bdata login) but do not declare where credentials come from, nor do they declare required binaries like jq. The instructions also explicitly tell the agent to run arbitrary network calls and collect wide-ranging web data — which is expected for this skill but the missing credential handling and broad file/command usage are scope gaps.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md instructs users/agents to run an installation command that downloads and executes a script from https://cli.brightdata.com/install.sh (curl | bash). That domain appears to be the vendor's official CLI host (lower risk than a random IP), but piping a remote script to a shell is high-risk behavior in general and the skill does not document verification (checksums, pinned release, or manual review).
Credentials
The skill declares no required environment variables or primary credential, yet the workflow depends on Bright Data CLI which requires authentication (the SKILL.md calls for 'bdata login'). Additionally, example workflows assume availability of other CLI utilities (jq, xargs) and ability to write files. The lack of declared credentials or config paths is disproportionate to what the instructions require and omits where sensitive tokens would be stored or how they are protected.
Persistence & Privilege
The skill is not always-enabled and does not request persistent privileges via the registry metadata. It is instruction-only and does not modify other skills' configs. However, because the SKILL.md tells agents to install a third-party CLI that writes to disk, the skill could create installed binaries on the host if followed — this is an operational concern but not a registry-declared privilege.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install market-intel - 安装完成后，直接呼叫该 Skill 的名称或使用
/market-intel触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release: real-time competitive intelligence skill using Bright Data’s web scraping infrastructure.
- Supports on-demand analysis of competitors’ pricing, features, reviews, hiring, and content strategies via live web data.
- Includes clear workflow: clarify user needs, gather fresh data, apply analysis frameworks, and deliver actionable insights.
- Provides modular analysis for competitor profiling, pricing intelligence, review insights, hiring signals, and SEO/content comparison.
- Emphasizes efficient, parallelized data collection and strict citation of all sources.
- Requires Bright Data CLI setup; no API keys or complex configuration needed.
元数据
常见问题
competitive-intel 是什么？
Real-time competitive intelligence and market research using Bright Data's web scraping infrastructure. Analyzes competitors' pricing, features, reviews, hir... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 105 次。
如何安装 competitive-intel？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install market-intel」即可一键安装，无需额外配置。
competitive-intel 是免费的吗？
是的，competitive-intel 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
competitive-intel 支持哪些平台？
competitive-intel 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 competitive-intel？
由 Meir Kadosh（@meirk-brd）开发并维护，当前版本 v1.0.0。
推荐 Skills