← 返回 Skills 市场
146
总下载
1
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install uapp-core-index
功能描述
友盟 U-App 核心指标查询技能，支持通过 umeng-cli call 调用友盟 OpenAPI（gateway.open.umeng.com）的 9 个只读查询接口，涵盖账户维度所有 App 合计、单日快照（DAU/新增/启动/总用户）、活跃/新增/启动趋势、使用时长。当用户需要查询 DAU、日活、新增用户...
安全使用建议
This skill appears to implement Umeng U-App queries via the official umeng-cli, so its core behavior is coherent. The main concerns: (1) SKILL.md asks the agent to run umeng-cli trace immediately (and to send a trace that includes any Appkey provided) — that telemetry could send identifiers/keys to Umeng without explicit user consent; (2) the install instruction includes piping a GitHub-hosted install script to sh, which you should inspect before running. Recommendations before installing/using: (a) require explicit user consent before any umeng-cli trace/telemetry, and do not automatically send appkeys; (b) review the umeng-cli source/install script or install via your package manager rather than piping remote scripts; (c) treat Appkeys and AK/SK as sensitive — prefer to enter them only when necessary and confirm where they are sent; (d) if you need stronger assurance, ask the skill author to remove or make telemetry opt-in and to provide cryptographic hashes for install artifacts. If you cannot verify these, proceed cautiously or decline to install.
功能分析
Type: OpenClaw Skill
Name: uapp-core-index
Version: 1.2.0
The skill bundle contains instructions (SKILL.md) that direct the AI agent to automatically perform telemetry by running 'umeng-cli trace' commands, which include exfiltrating the user-provided 'appkey' to the CLI tool. While this may be intended for usage analytics, forcing an agent to report user-specific identifiers via prompt instructions is a high-risk behavior. Additionally, the documentation suggests a 'curl | sh' installation method from a remote GitHub repository, which is a common security risk for remote code execution.
能力标签
能力评估
Purpose & Capability
Name/description match the runtime instructions: all operations are performed via the documented umeng-cli and the declared CLI calls/endpoints align with querying Umeng U-App metrics. Requiring the umeng-cli binary and describing AK/SK auth via umeng-cli are coherent with the stated purpose.
Instruction Scope
The SKILL.md instructs the agent to run umeng-cli trace immediately after reading the skill and to send an additional trace including the user-provided appkey before the first API call. These telemetry calls are outside the core task of fetching metrics and could transmit app identifiers or appkeys to Umeng without explicit user consent. Other instructions (login flow, call format) remain within expected scope.
Install Mechanism
The skill is instruction-only (no install spec), but it recommends installing @umengfe/umeng-cli via npm or running an official install script via curl | sh from raw.githubusercontent.com. Using GitHub raw is common, but piping a remote script to sh is higher-risk and should be reviewed before execution.
Credentials
The skill declares no env vars or unrelated credentials (good). However, it relies on umeng-cli to obtain and cache AK/SK via interactive login, and it explicitly instructs sending appkey values to umeng-cli trace. Sending an appkey (or other contextual identifiers) to a telemetry endpoint is not clearly justified by the query functionality and may be disproportionate.
Persistence & Privilege
always is false and there is no request to modify other skills or system configs. The skill suggests running umeng-cli login which stores credentials in the CLI's own cache — expected for this integration. No persistent or elevated platform privileges are requested by the skill itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install uapp-core-index - 安装完成后，直接呼叫该 Skill 的名称或使用
/uapp-core-index触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.0
**Skill version 1.2.0 changelog**
- Major refactor: migrated from custom Python scripts and OpenAPI Python SDK to integrating the official `umeng-cli` tool.
- Removed all legacy code and custom scripts; the skill now relies solely on `umeng-cli` for data access and queries.
- SKILL.md extensively updated: now documents 9 supported umeng-cli queries, detailed parameter requirements, appkey usage, login flow, and new interface endpoints.
- Added interface documentation for account statistics, daily snapshots, multi-day trends, and usage duration queries with clear field/parameter definitions.
- Introduced umeng-cli trace (埋点) logic for skill and appkey usage tracking.
- New dependency requirement: umeng-cli must be installed on the host system.
v1.1.0
- Major documentation overhaul: improved clarity and structure for usage, parameters, and error handling.
- Added detailed multi-step usage flow and response guidance.
- Enhanced typical questions and CLI parameter mapping.
- Clarified edge cases (missing app name, data not found, date errors) and added recommended responses.
- Updated and expanded example commands for both text and JSON output.
v1.0.0
Initial public release.
- 提供友盟 App 核心指标（DAU、新增用户、活跃用户、启动次数、使用时长）自然语言问答查询入口
- 支持常用指标和时间范围的自然语言转 CLI 查询参数
- 输出文本结论与趋势数据，支持 JSON 结构化数据输出
- 多种配置文件指定方式（参数、环境变量、默认路径）
- 提供详细调用示例与典型问法映射表
元数据
常见问题
App核心指标问答 是什么？
友盟 U-App 核心指标查询技能，支持通过 umeng-cli call 调用友盟 OpenAPI（gateway.open.umeng.com）的 9 个只读查询接口，涵盖账户维度所有 App 合计、单日快照（DAU/新增/启动/总用户）、活跃/新增/启动趋势、使用时长。当用户需要查询 DAU、日活、新增用户... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 146 次。
如何安装 App核心指标问答？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install uapp-core-index」即可一键安装，无需额外配置。
App核心指标问答 是免费的吗？
是的，App核心指标问答 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
App核心指标问答 支持哪些平台？
App核心指标问答 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 App核心指标问答？
由 Umeng+（@squall0925）开发并维护，当前版本 v1.2.0。
推荐 Skills