← 返回 Skills 市场
Elon马斯克情报内参
作者
xqw1377-prog
· GitHub ↗
· v1.0.10
431
总下载
0
收藏
2
当前安装
12
版本数
在 OpenClaw 中安装
/install musk-insider-pro
功能描述
实时追踪Elon Musk及其企业动态，提供每日AI生成的投资情报摘要和市场影响分析。
安全使用建议
Do not install or enable this skill without clarification. Questions and actions to consider before proceeding:
- Ask the publisher to explain why the codebase includes two entry files (bare.py and main.py) and which one is intended to run.
- Require removal of hard-coded credentials (SKILLPAY_API_KEY) and rotation of that key if it is real; secrets must be provided via environment variables and declared in metadata.
- Verify the skill's source and homepage; source is unknown and the package claims capabilities (real-time tracking, AI analysis) that are not implemented.
- If you still want to test, run it in a sandboxed environment with restricted network access and monitor outbound traffic to ensure it doesn't contact unexpected endpoints.
- Prefer a version with reproducible provenance, no embedded secrets, and documentation that matches the actual runtime behavior.
功能分析
Type: OpenClaw Skill
Name: musk-insider-pro
Version: 1.0.10
The skill bundle contains a hardcoded API key (sk_8b36c2ca...) in main.py, which is a significant security vulnerability. While the code aligns with its stated purpose of providing a demo for a payment-gated news service (linking to https://pay.skillpay.me), the inclusion of credentials and the aggressive port-probing logic in bare.py are risky behaviors. No clear evidence of intentional malware, such as data exfiltration or backdoors, was detected.
能力评估
Purpose & Capability
The description promises real-time tracking of Elon Musk and AI-generated investment intelligence, but the provided runtime behavior is a minimal demo HTTP service that returns static example JSON and a sample payment link. The shipped code does not implement scraping, data feeds, or model inference, so the implementation is inconsistent with the claimed purpose.
Instruction Scope
SKILL.md instructs running bare.py and documents simple endpoints, which matches bare.py. However there is a second service file (main.py) not referenced by SKILL.md; main.py contains a hard-coded SKILLPAY_API_KEY and FastAPI endpoints. The presence of an unreferenced file with a secret expands the runtime surface beyond the documented instructions.
Install Mechanism
No install spec (instruction-only) — lowest install risk. A requirements.txt lists fastapi and uvicorn which are unnecessary for the documented entrypoint (bare.py) but required by main.py. This mismatch suggests leftover or alternate runtime expectations.
Credentials
requires.env lists none, yet main.py contains a hard-coded SKILLPAY_API_KEY (sensitive credential) baked into source. The skill both exposes a secret in-repo and fails to declare any credential usage, which is disproportionate and risky (possible leakage or misuse).
Persistence & Privilege
The skill is not set to always:true and is user-invocable. It runs an HTTP server bound to configured ports (reads many common PORT env names) which is expected for an HTTP skill. No other privileged platform modifications are present.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install musk-insider-pro - 安装完成后，直接呼叫该 Skill 的名称或使用
/musk-insider-pro触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.11
No changes detected in this version.
- No file or documentation changes were made.
- Functionality and interfaces remain the same as the previous release.
v1.0.10
- 更新运行指令为 `python bare.py`
- 启动时，若无端口变量，新增对 8080/8000/3000 多端口的自动监听支持
v1.0.9
- Updated startup command to use `bare.py` instead of `main.py`
- Changed default listening port from 8000 to 8080
- Improved environment variable wording for custom port detection
v1.0.8
Version 1.0.8
- Removed the file serve.py to simplify the codebase.
- No changes to interfaces or documentation content.
v1.0.7
MuskInsider Pro v1.0.7
- Added bare.py, likely providing a minimal or foundational version of the service.
- No changes to documented features or APIs.
v1.0.6
No changes detected in this version. This update does not include any code or documentation changes.
v1.0.5
- Added serve.py to the project.
- No changes to existing features or interfaces.
v1.0.4
Version 1.0.4 of MuskInsider Pro
- No user-facing changes in this release.
- No file or documentation changes detected.
v1.0.3
- No user-facing changes; version bump only.
- No updates to SKILL.md or source code detected.
- All existing features and documentation remain unchanged.
v1.0.2
- Added requirements.txt to define and manage Python package dependencies.
v1.0.1
No user-facing changes in this version.
No file changes detected; functionality and documentation remain the same.
v1.0.0
Initial release of MuskInsider Pro.
- Real-time monitoring of Elon Musk and related companies (Tesla, SpaceX, xAI, X) activities.
- Daily AI-generated intelligence summaries from tweets and news.
- Market impact analysis for related cryptocurrencies and stocks.
- Integrated SkillPay 0.01U payment for unlocking in-depth reports.
- Free daily briefing available via the /invoke endpoint.
元数据
常见问题
Elon马斯克情报内参 是什么？
实时追踪Elon Musk及其企业动态，提供每日AI生成的投资情报摘要和市场影响分析。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 431 次。
如何安装 Elon马斯克情报内参？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install musk-insider-pro」即可一键安装，无需额外配置。
Elon马斯克情报内参 是免费的吗？
是的，Elon马斯克情报内参 完全免费（开源免费），可自由下载、安装和使用。
Elon马斯克情报内参 支持哪些平台？
Elon马斯克情报内参 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Elon马斯克情报内参？
由 xqw1377-prog（@xqw1377-prog）开发并维护，当前版本 v1.0.10。
推荐 Skills