← 返回 Skills 市场
Trend Tap
作者
XiaoYiWeio
· GitHub ↗
· v2.0.0
· MIT-0
219
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install trend-tap
功能描述
Real-time trending topics aggregator across 7 platforms (X/Twitter, Reddit, Google Trends, Hacker News, Zhihu, Bilibili, Weibo). Trigger: when user says 'tre...
安全使用建议
This skill appears coherent and implements what it claims: it scrapes public sources using Python and requires no API keys. Before installing or enabling scheduled runs, review and approve the scheduler behavior (it writes entries to your user crontab and creates daily files under ~/.openclaw/trend-tap/daily/). If you don't want automated scheduling, avoid running scheduler.py --set. Also review the code if you have concerns about scraping frequency or the hard-coded Weibo cookie header; otherwise there are no unexplained credential requests or hidden network endpoints.
功能分析
Type: OpenClaw Skill
Name: trend-tap
Version: 2.0.0
The skill provides legitimate trending topic aggregation but includes high-risk system persistence capabilities in 'scripts/scheduler.py', which modifies the user's crontab using subprocess calls. This script lacks input sanitization for the cron expression, creating a potential command injection vulnerability if malformed strings are provided. Additionally, 'scripts/sources/weibo.py' contains a hardcoded session cookie (SUB=...) to bypass access controls, which is a risky practice. While these behaviors align with the stated features (daily briefings and scraping), the direct manipulation of system configuration files and lack of input validation warrant a suspicious classification.
能力评估
Purpose & Capability
Name/description (trending topics from 7 platforms) matches the code and declared requirements. Only required binary is python3 and the install step is 'brew python3' — both reasonable and proportionate for a Python-based scraper.
Instruction Scope
SKILL.md instructs the agent to run the included Python scripts (trends.py and scheduler.py). Those scripts perform network requests to the listed platforms and format results — consistent with the stated purpose. Note: scheduler.py reads and writes the user's crontab to schedule daily briefings (this changes system state), and the code saves scheduled results under ~/.openclaw/trend-tap/daily/.
Install Mechanism
Install spec is a single brew package (python3). No downloads from arbitrary URLs or archive extraction. Low installation risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. All network calls use public endpoints. There is a hard-coded Cookie header in the Weibo HTML fallback request, but this is a static value in the code (not requesting user secrets).
Persistence & Privilege
always:false and default autonomous invocation are unchanged (normal). The scheduler component will modify the user's crontab and create files under the user's home directory when invoked; consider that an explicit side effect rather than a hidden privilege escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trend-tap - 安装完成后，直接呼叫该 Skill 的名称或使用
/trend-tap触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.0
v2.0 — renamed from trend-radar; all sources stable with retry logic
元数据
常见问题
Trend Tap 是什么？
Real-time trending topics aggregator across 7 platforms (X/Twitter, Reddit, Google Trends, Hacker News, Zhihu, Bilibili, Weibo). Trigger: when user says 'tre... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 219 次。
如何安装 Trend Tap？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trend-tap」即可一键安装，无需额外配置。
Trend Tap 是免费的吗？
是的，Trend Tap 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Trend Tap 支持哪些平台？
Trend Tap 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Trend Tap？
由 XiaoYiWeio（@xiaoyiweio）开发并维护，当前版本 v2.0.0。
推荐 Skills