← 返回 Skills 市场
438
总下载
0
收藏
3
当前安装
5
版本数
在 OpenClaw 中安装
/install social-insights
功能描述
Social media analytics and performance tracking. Track engagement, optimal posting times, competitor analysis, AI-powered insights, auto-generated charts, an...
安全使用建议
This package advertises live, multi-platform social analytics but the included Python script only generates static demo reports and does not call any external APIs. Before installing or supplying credentials: 1) Confirm whether there are additional source files or a newer version that actually implements API integrations; ask the publisher for a homepage or source repository. 2) Do not provide real API keys/tokens until you can review code that uses them and confirm the network endpoints it contacts. 3) If you need to test it, run the script in an isolated environment (sandbox/container) and monitor outbound network activity to see whether it contacts expected platform APIs. 4) Ask the author to fix the metadata mismatches (env var names and documented requirements) and provide documentation for how report delivery and scheduling are performed. These inconsistencies may be benign (unfinished/demo code) but they should be clarified before trusting any sensitive credentials.
功能分析
Type: OpenClaw Skill
Name: social-insights
Version: 1.3.0
The skill is classified as suspicious due to a significant discrepancy between its documentation and its actual implementation. While SKILL.md claims to provide 'AI-powered' social media analytics and requests sensitive API credentials (Twitter, LinkedIn, Threads, Bluesky), the provided script (scripts/analyzer.py) contains only hardcoded sample data and does not actually perform any analytics or utilize the requested environment variables. This deceptive behavior—requesting high-value secrets for a non-functional 'mock' script—is a strong indicator of a potential credential-harvesting setup or a social engineering attempt to gain access to user API keys.
能力标签
能力评估
Purpose & Capability
The skill advertises real-time analytics across many platforms (Twitter, LinkedIn, Threads, Bluesky, etc.) and auto-generated reports, but the included script (scripts/analyzer.py) only produces static demo reports and only checks for the presence of a single TWITTER_API_KEY env var — it does not implement API calls or platform integrations. The metadata and README claim broad capabilities that the code does not implement, which is an incoherence between claimed purpose and actual capability.
Instruction Scope
SKILL.md instructs users to set multiple API credentials and shows commands/prompts for live analytics, CSV imports, and automatic report delivery, but the runtime instructions do not direct the agent to read unexpected system files or secrets beyond the declared env vars. However the instructions imply behaviors (network API calls, scheduled auto-delivery) that are not present in the provided code — the scope is overstated.
Install Mechanism
There is no install spec (instruction-only skill) and the only code file is a small Python script. Nothing in the package downloads or executes remote code during installation, which is low risk from an install-mechanism standpoint.
Credentials
The skill's metadata and SKILL.md list a number of optional API credentials (Twitter keys/secrets/tokens, LinkedIn token, Threads token, Bluesky handle/password, ANALYTICS_PLATFORMS). The registry-level requirements show no required env vars, and the metadata's env list does not exactly match the env var names referenced in the README (e.g., SKILL.md mentions TWITTER_ACCESS_TOKEN and TWITTER_ACCESS_TOKEN_SECRET which are not present in the metadata section). Because the code never uses these credentials beyond a single existence check, the extensive credential list is disproportionate to the actual implementation and could be used to solicit sensitive tokens unnecessarily.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide config changes. It creates a local data directory when run (SOCIAL_ANALYTICS_DATA_DIR defaulting to .social-analytics), which is reasonable for saving reports. No elevated persistence or cross-skill configuration is requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install social-insights - 安装完成后，直接呼叫该 Skill 的名称或使用
/social-insights触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.0
**Expanded platform support for social media analytics.**
- Added Threads and Bluesky analytics support, including new environment variables for authentication.
- Updated tags to include "threads" and "bluesky".
- Expanded documentation to highlight Threads and Bluesky features.
- No changes to core analytics or reporting functionality.
v1.2.0
添加 TikTok/YouTube Shorts/Instagram Reels 分析、AI 趋势预测、竞品对比增强
v1.1.1
## 1.1.1
- Documentation updated in SKILL.md.
- No functional or feature changes.
v1.1.0
Version 1.1.0 introduces powerful new analytics and visualization features:
- Auto-generated charts and graphs, with PNG/PDF export
- AI-powered trend prediction and growth forecasting
- New goal tracking with progress alerts
- Competitor benchmarking with visual comparisons
- Enhanced data visualization and mobile-friendly report formats
- Faster report generation (up to 50% speed increase)
v1.0.0
Initial release: Performance tracking, competitor analysis, optimal timing, AI recommendations, automated reports
元数据
常见问题
Social Insights 是什么？
Social media analytics and performance tracking. Track engagement, optimal posting times, competitor analysis, AI-powered insights, auto-generated charts, an... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 438 次。
如何安装 Social Insights？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install social-insights」即可一键安装，无需额外配置。
Social Insights 是免费的吗？
是的，Social Insights 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Social Insights 支持哪些平台？
Social Insights 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Social Insights？
由 fly3094（@fly3094）开发并维护，当前版本 v1.3.0。
推荐 Skills