Social Intel Hub

社媒情报中心 - 多平台爬虫 + 数据分析 + AI洞察 + 词云 + 趋势追踪

This skill appears to implement the described crawler and analysis, but there are red flags you should consider before installing: - Hardcoded developer paths: SKILL.md and the script reference /Users/kk/... and expect directories that likely don't exist on your machine. Ask the author why those directories are required or sanitize them before use. - Trusted external CLI: The skill uses a local 'mcporter' binary to call remote TikHub services (mcporter call server.method). You must trust this binary and its configuration — inspect mcporter, its config, and what endpoints it will call. If mcporter is malicious or misconfigured it could exfiltrate data or perform unexpected network actions. - Local execution risk: The package includes and runs a Python script that will execute subprocess calls and write cache/output files under /tmp. Review social_intel.py fully (network calls, file reads) and run in an isolated environment (container/VM) if you have any doubt. - Mitigations: run the script in a sandbox, validate or replace hardcoded paths, confirm mcporter binary origin and behavior, and verify that no sensitive local files or credentials are referenced by the script or mcporter before giving it network access. If you want, I can: (1) point out exact lines in social_intel.py that call mcporter and write files, (2) suggest a safe wrapper to run it in a temp environment, or (3) produce a sanitized SKILL.md that removes user‑specific paths.