← 返回 Skills 市场
OSINT Social Analyzer
作者
guleguleguru
· GitHub ↗
· v1.0.0
454
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install osint-social
功能描述
Investigate a username across 1000+ social media platforms and websites using social-analyzer. Use this skill whenever the user wants to look up, investigate...
安全使用建议
This skill appears to do what it says: run social-analyzer and a small Chinese lookup script to query public profiles. Before installing or running: (1) Prefer creating a Python virtual environment rather than using pip with --break-system-packages; (2) review the social-analyzer package (its PyPI project and source repo) for supply-chain/trust concerns; (3) be aware the tool will make many automated HTTP requests (rate limits, CAPTCHAs, or IP blocks are possible), and ensure you have legal authorization to perform targeted investigations in your jurisdiction; (4) if you are uncomfortable with autonomous agents invoking this skill automatically, restrict invocation or require explicit user permission before running scans.
功能分析
Type: OpenClaw Skill
Name: osint-social
Version: 1.0.0
The skill's stated purpose is legitimate OSINT, and its documentation includes clear ethical disclaimers. However, the `SKILL.md` instructions and `scripts/run_osint.sh` pass user-provided `{USERNAME}` directly into shell commands without explicit sanitization by the skill itself. This creates a shell injection vulnerability (RCE risk) if the OpenClaw agent does not properly sanitize the input before execution. While the `run_osint.sh` script quotes the username, this does not prevent all forms of injection if the agent constructs the initial command string poorly. The `pip3 install --break-system-packages` command also requests elevated installation permissions, which, while sometimes necessary, adds to the risk profile.
能力评估
Purpose & Capability
The skill's name/description (username OSINT across 1000+ platforms) matches its contents: instructions to install and run the social-analyzer Python package, a shell wrapper, and a Chinese-platform Python script. Required binaries (python3, pip3) and included scripts are appropriate for the task.
Instruction Scope
SKILL.md directs the agent to install social-analyzer and run it (plus cn_lookup.py for Chinese platforms). The runtime instructions explicitly perform HTTP requests to public platform APIs and parse JSON; they do not attempt to read unrelated local files, system config, or environment variables. Note: SKILL.md advises the skill be used automatically for any username lookup; that trigger policy is broad but consistent with the described purpose.
Install Mechanism
No packaged install spec is embedded; SKILL.md instructs users to pip3 install social-analyzer (from PyPI). Installing a third‑party package via pip is expected for a Python wrapper but carries the usual supply-chain risk. The documentation recommends the --break-system-packages flag (a system-level install flag) which is unnecessary and riskier than using a virtualenv; otherwise no downloads from unknown personal servers or shorteners are used.
Credentials
The skill requests no environment variables, no credentials, and no config paths. All network calls target public platform endpoints (e.g., Bilibili, Zhihu, Weibo) or rely on the social-analyzer package—this is proportionate to the stated functionality.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It runs on demand and requires no elevated privileges; autonomous invocation is allowed but is the platform default and not combined with other concerning privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install osint-social - 安装完成后，直接呼叫该 Skill 的名称或使用
/osint-social触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
First release — cross-platform username OSINT with Chinese platform support (Bilibili, Zhihu, Weibo)
- Initial release of the osint-social skill.
- Investigate a username across 1000+ social media platforms with social-analyzer.
- Conversational summary of results, including confidence levels and key profile info.
- Dedicated workflow and script for Chinese platforms (Bilibili, Zhihu, Weibo).
- Clear guidance on setup, standard and deep lookups, and platform-specific investigations.
- Privacy & ethics reminder included in every investigation summary.
元数据
常见问题
OSINT Social Analyzer 是什么？
Investigate a username across 1000+ social media platforms and websites using social-analyzer. Use this skill whenever the user wants to look up, investigate... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 454 次。
如何安装 OSINT Social Analyzer？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install osint-social」即可一键安装，无需额外配置。
OSINT Social Analyzer 是免费的吗？
是的，OSINT Social Analyzer 完全免费（开源免费），可自由下载、安装和使用。
OSINT Social Analyzer 支持哪些平台？
OSINT Social Analyzer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OSINT Social Analyzer？
由 guleguleguru（@guleguleguru）开发并维护，当前版本 v1.0.0。
推荐 Skills