← 返回 Skills 市场
Social Monitor
作者
nicemaths123
· GitHub ↗
· v1.0.0
· MIT-0
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install social-monitor
功能描述
Monitor real-time brand mentions across Twitter, Reddit, forums, and news with sentiment analysis, crisis detection, and instant alerts via Slack or Telegram.
安全使用建议
Before installing or running this skill: (1) note that the registry metadata claims no credentials, but the SKILL.md requires APIFY_TOKEN, CLAUDE_API_KEY, and optional Slack/Telegram secrets — treat this as a transparency/integrity issue. (2) Only provide tokens that are scoped and rotatable (create limited-scope keys or deploy in a throwaway/test account first). (3) Because this is instruction-only with no code bundle to inspect, ask the publisher for the actual implementation code or prefer a skill with a verifiable source/homepage. (4) Run any untrusted scraping/analysis in an isolated environment to limit exposure of tokens and data. (5) Verify Apify actor IDs and any third-party endpoints used, and review costs/privacy implications of continuous scraping. If you cannot verify the source or cannot supply scoped credentials, do not install or run the skill.
功能分析
Type: OpenClaw Skill
Name: social-monitor
Version: 1.0.0
The skill implements a brand monitoring system using Apify for scraping and Claude for sentiment analysis. While the logic in SKILL.md is consistent with its stated purpose, it requires high-risk capabilities including network access to multiple external APIs (Apify, Anthropic, Slack, Telegram), the ability to read sensitive environment variables (API keys), and filesystem access to write logs. Per the provided guidelines, these risky capabilities are classified as suspicious because they provide the necessary access for potential data exfiltration, even though no clear malicious intent or evidence of harmful behavior was found.
能力评估
Purpose & Capability
The declared purpose (monitor brand mentions, sentiment, alerts) matches the actions described in SKILL.md (use Apify for scraping, Claude for analysis, Slack/Telegram for alerts). The required services and packages in the instructions are coherent with the stated capability.
Instruction Scope
SKILL.md explicitly instructs the agent/operator to obtain and export multiple secret credentials (APIFY_TOKEN, CLAUDE_API_KEY, SLACK_WEBHOOK_URL, TELEGRAM_BOT_TOKEN/CHAT_ID) and to run networked scrapers and API calls. The instructions do not attempt to read local system files, but they do direct repeated network access and transmission of monitored content to external services (Apify, Claude, Slack/Telegram). The bigger problem: these env-var requirements appear in SKILL.md but were not declared in the skill metadata, creating a transparency gap.
Install Mechanism
There is no install spec in the registry (instruction-only), but SKILL.md tells users to run `npm install apify-client axios node-cron dotenv`. This is a typical dependency list for a Node-based implementation (moderate risk). No arbitrary binary downloads or obscure URLs are requested; however, because the skill is instruction-only, there is no bundled code to audit.
Credentials
The environment variables requested by the runtime instructions (Apify token, Claude API key, Slack webhook, Telegram bot token/chat id) are sensible for the described functionality. However, the registry metadata incorrectly lists 'Required env vars: none' and 'Primary credential: none' — that mismatch is a notable red flag because it hides the fact the skill requires private credentials. Users should treat the listed example tokens as placeholders and avoid pasting production master keys without scoping and rotation.
Persistence & Privilege
The skill does not request always:true and is user-invocable. There is no instruction to modify other skills or system-wide settings. Autonomous invocation is permitted (platform default) but not by itself a problem here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install social-monitor - 安装完成后,直接呼叫该 Skill 的名称或使用
/social-monitor触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Social Listening & Brand Reputation Monitor Skill v1.0.0
- Initial release of real-time, multi-platform brand monitoring system.
- Scrapes Twitter/X, Reddit, news, and review platforms for brand and competitor mentions.
- Performs automated sentiment analysis, crisis detection, and topic classification.
- Delivers instant alerts to Slack, Telegram, or email for reputation risks.
- Generates weekly reputation reports and maintains a rolling reputation dashboard.
- Easily configurable for brand keywords, competitors, alert thresholds, and notification channels.
元数据
常见问题
Social Monitor 是什么?
Monitor real-time brand mentions across Twitter, Reddit, forums, and news with sentiment analysis, crisis detection, and instant alerts via Slack or Telegram. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 82 次。
如何安装 Social Monitor?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install social-monitor」即可一键安装,无需额外配置。
Social Monitor 是免费的吗?
是的,Social Monitor 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Social Monitor 支持哪些平台?
Social Monitor 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Social Monitor?
由 nicemaths123(@nicemaths123)开发并维护,当前版本 v1.0.0。
推荐 Skills