← 返回 Skills 市场
OpenClaw Trends
作者
Andrey Mashukov
· GitHub ↗
· v1.0.0
· MIT-0
227
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-trends
功能描述
Fetch and aggregate OpenClaw-related content from across the internet. Use when the user asks about OpenClaw trends, news, tutorials, videos, community discu...
安全使用建议
This skill appears to do what it says (search YouTube, GitHub, DuckDuckGo), but there are two things to consider before installing:
1) The Python script contains a hardcoded YouTube API key. Even if you don't set an environment key, the script will use that embedded key — meaning requests will be sent under someone else's credentials (and that owner will see usage). Ask the author to remove the embedded key and require YOUTUBE_API_KEY in the skill metadata, or rotate/revoke the embedded key if it's yours.
2) The metadata doesn't declare the YOUTUBE_API_KEY requirement even though the code uses it. This mismatch is a red flag for sloppy or intentionally hidden behavior. Confirm with the publisher why credentials are embedded and request a version that requires the user to supply their own key.
Other practical precautions: run the script in an isolated environment, review/replace the embedded key, and audit network egress if you schedule it via cron. If you don't trust the embedded key's owner, do not run the skill as-is.
功能分析
Type: OpenClaw Skill
Name: openclaw-trends
Version: 1.0.0
The skill is a legitimate utility designed to aggregate OpenClaw-related news and trends from YouTube, GitHub, and web searches. The code in `scripts/fetch_trends.py` uses standard libraries and the GitHub CLI to fetch public data and format it for the user. While it contains a hardcoded YouTube API key, the `SKILL.md` documentation explicitly notes this was included for convenience, and the behavior does not pose a risk to the user's environment or data. There are no signs of data exfiltration, malicious execution, or prompt injection.
能力评估
Purpose & Capability
The name/description (fetch OpenClaw trends) aligns with the included script's behavior (YouTube, GitHub, web scraping). However, the SKILL.md and script mention a YouTube Data API key (and the script contains a hardcoded default key) while the registry metadata declares no required environment variables/credentials — an inconsistency that should be explained.
Instruction Scope
The SKILL.md and script limit actions to web queries (YouTube API, DuckDuckGo HTML scraping, gh CLI). They do not read arbitrary local files. Concerns: (1) SKILL.md suggests scheduled cron usage (fine but makes automated periodic runs easier), and (2) the script hardcodes a Google API key and will make outbound requests that reveal usage to the key owner. The instructions also reference an integration ('OpenClaw message tool') that is not implemented, which is sloppy but not inherently malicious.
Install Mechanism
No install spec — instruction-only with an included Python script. This is low-risk from an install mechanism perspective because nothing is downloaded or executed automatically during installation.
Credentials
The script uses a YOUTUBE_API_KEY environment variable but falls back to a hardcoded API key in code. The registry declares no required env vars/credentials — this mismatch is disproportionate and risky because the embedded key will attribute all API requests to that key's owner and could leak query data to them. No other unnecessary credentials are requested.
Persistence & Privilege
The skill does not request permanent 'always' inclusion, does not modify other skills/config, and only suggests (optional) cron scheduling. No privileged persistence is requested by the skill itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-trends - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-trends触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release.
- Fetches trending OpenClaw-related content from YouTube, GitHub, X/Twitter, Reddit, and Hacker News.
- Aggregates, deduplicates, and ranks results by date and relevance.
- Supports structured summaries including source, title, short description, URL, and date.
- Provides both CLI and cron-based daily update options.
- Uses official APIs where possible and web search for platforms without APIs.
元数据
常见问题
OpenClaw Trends 是什么？
Fetch and aggregate OpenClaw-related content from across the internet. Use when the user asks about OpenClaw trends, news, tutorials, videos, community discu... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 227 次。
如何安装 OpenClaw Trends？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-trends」即可一键安装，无需额外配置。
OpenClaw Trends 是免费的吗？
是的，OpenClaw Trends 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw Trends 支持哪些平台？
OpenClaw Trends 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw Trends？
由 Andrey Mashukov（@andremashukov）开发并维护，当前版本 v1.0.0。
推荐 Skills