← 返回 Skills 市场
shawnshenopeninterx

Influencer Report

作者 shawnshenopeninterx · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
343
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install memories-influencer-report
功能描述
Generate a comprehensive influencer vetting report. Use when someone asks to vet, analyze, or review an influencer/creator. Takes a creator profile URL or vi...
安全使用建议
Before installing or running this skill: - Do not supply your Memories API keys unless you trust the skill/author. The scripts require MEMORIES_V1_API_KEY and MEMORIES_API_KEY to operate. - Note the registry metadata does NOT list these required env vars even though SKILL.md and the code do — treat that as an indicator the package metadata may be incomplete or sloppy. Ask the publisher to fix the registry metadata. - Verify the endpoints: the code posts to api.memories.ai and mavi-backend.memories.ai, but it polls a webhook at demo.memories-ai.org for results. Confirm with the Memories.ai documentation or the skill author that demo.memories-ai.org is an intended endpoint and not a third-party/attacker host. - Run the scripts in an isolated environment (or sandbox) and inspect network traffic if you must test with real keys. Consider creating limited-scope test keys if Memories.ai supports them. - If you cannot verify the webhook host or the author, avoid installing or give only minimal, revocable credentials and monitor usage.
功能分析
Type: OpenClaw Skill Name: memories-influencer-report Version: 1.0.0 The skill bundle is designed to generate influencer vetting reports using the Memories.ai API. All network requests in `scripts/influencer_report.py` are directed to hardcoded `memories.ai` domains (api.memories.ai, mavi-backend.memories.ai, demo.memories-ai.org), which are consistent with the skill's stated purpose. API keys are read from environment variables and sent to these legitimate services for authentication, as expected. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`. While certain API parameters (like `callback_url` or `task_id` for polling) could theoretically lead to vulnerabilities if user-controlled or if the external service were malicious, they are used as intended within this skill and do not indicate malicious intent by the skill developer.
能力评估
Purpose & Capability
Name/description, SKILL.md, and the bundled Python scripts align: the code scrapes creator profiles (V1) and submits videos to Memories.ai MAI/metadata endpoints (V2). However, the registry metadata claims no required environment variables while SKILL.md and the code require two Memories API keys (MEMORIES_V1_API_KEY and MEMORIES_API_KEY). That mismatch is unexpected and reduces trust in the packaging/metadata.
Instruction Scope
Runtime instructions are narrowly scoped to scraping a profile and submitting videos to Memories.ai endpoints. They do not instruct reading unrelated local files or other credentials. One noteworthy oddity: poll_result() polls a webhook at https://demo.memories-ai.org/webhooks/memories/result/{task_id} (a different host than the primary API endpoints). Polling an external webhook host for results is unusual and should be verified as legitimate for this API.
Install Mechanism
This is instruction+script-only with no install spec; nothing is downloaded or written automatically by an installer. That keeps install risk low.
Credentials
The SKILL.md and scripts require two API keys (V1 and V2) for Memories.ai — which is consistent with the skill's purpose — but the published registry metadata lists no required environment variables or primary credential. The discrepancy between declared registry requirements and the actual runtime requirements is concerning because a user could install without realizing they'll need to supply API keys. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not request system-level persistence. It only runs as scripts and makes outbound HTTP requests.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install memories-influencer-report
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /memories-influencer-report 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of the Influencer Report Skill. - Generate comprehensive influencer vetting reports using Memories.ai video intelligence. - Supports analysis via creator profile URLs (auto-scrapes recent videos) or direct video URLs. - Integrates both Memories.ai V1 and V2 APIs for content ingestion, transcript analysis, and metadata. - Provides brand safety checks, content quality scoring, and formatted markdown reports. - Setup requires API keys for Memories.ai V1 and V2.
元数据
Slug memories-influencer-report
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Influencer Report 是什么?

Generate a comprehensive influencer vetting report. Use when someone asks to vet, analyze, or review an influencer/creator. Takes a creator profile URL or vi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 343 次。

如何安装 Influencer Report?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install memories-influencer-report」即可一键安装,无需额外配置。

Influencer Report 是免费的吗?

是的,Influencer Report 完全免费(开源免费),可自由下载、安装和使用。

Influencer Report 支持哪些平台?

Influencer Report 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Influencer Report?

由 shawnshenopeninterx(@shawnshenopeninterx)开发并维护,当前版本 v1.0.0。

💬 留言讨论