← 返回 Skills 市场
squall0925

自定义事件数据查询

作者 Umeng+ · GitHub ↗ · v1.2.0 · MIT-0
cross-platform ⚠ suspicious
140
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install uapp-event
功能描述
友盟 U-App 自定义事件查询技能,支持通过 umeng-cli call 调用友盟 OpenAPI(gateway.open.umeng.com)的 7 个只读事件查询接口,涵盖事件列表、事件触发次数趋势、事件独立用户数、事件参数列表、参数值分布、指定参数值趋势、参数值时长分布。当用户需要查询自定义事件(埋点...
安全使用建议
This skill appears to perform what it claims (query Umeng U-App custom event metrics) and requires the 'umeng-cli' tool. However, the SKILL.md instructs the agent to run 'umeng-cli trace' immediately and again when an Appkey is provided — this will send telemetry (skill_name and appkey) to Umeng and is not necessary for read-only queries. Before installing or running this skill: - Don't run the automatic 'umeng-cli trace' calls unless you understand and accept that they will send information (including any appkey you provide) to Umeng. Prefer to disable or skip those trace steps. - Prefer installing 'umeng-cli' via npm and inspect the package/repo first; avoid blindly running 'curl | sh' install scripts without reviewing them. - Review what 'umeng-cli trace' does by checking the umeng-cli source (on the referenced GitHub) to see exactly what is sent. - Be cautious when providing your appkey to the agent; if you want to protect it, run the queries yourself or let the agent only show commands for you to run locally. - Ask the skill author to remove or make the telemetry opt-in and to fix the metadata mismatch that omits the umeng-cli requirement from the package-level requirements. If you want, I can (1) summarize the exact places the SKILL.md instructs sending telemetry, (2) extract the specific command examples to run manually, or (3) draft a suggested change requesting opt-in telemetry from the author.
功能分析
Type: OpenClaw Skill Name: uapp-event Version: 1.2.0 The skill contains instructions in SKILL.md that direct the AI agent to automatically execute telemetry commands (umeng-cli trace) and report the user's 'appkey' to the CLI tool immediately upon acquisition. Additionally, it promotes a high-risk installation pattern (curl | sh) via a remote script from GitHub. While these behaviors appear to be intended for usage tracking and developer convenience within the Umeng ecosystem, the use of prompt-based instructions to force background network activity and the promotion of unverified script execution are risky practices.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The SKILL.md describes a credential-less, CLI-driven read-only query skill that uses the umeng-cli to call Umeng OpenAPI — that matches the declared purpose. However, the skill package metadata (requirements summary) lists no required binaries while the SKILL.md frontmatter and instructions explicitly require 'umeng-cli' and include install instructions. This mismatch is an incoherence that should be corrected.
Instruction Scope
The instructions require running 'umeng-cli call' for queries (expected) but also instruct the agent to execute 'umeng-cli trace' immediately after reading the SKILL.md and again when an Appkey is provided. These trace commands will send telemetry (including the skill_name and, if appended, the appkey) to Umeng's service — telemetry/exfiltration of an appkey is not required to perform read-only queries and is out-of-band for the stated task. The SKILL.md also instructs running 'umeng-cli login --no-qr' in background mode and handling the returned login link, which is operationally reasonable but must be done with explicit user consent.
Install Mechanism
This is an instruction-only skill (no packaged install), and the SKILL.md recommends 'npm install -g @umengfe/umeng-cli' (reasonable) or piping a GitHub raw install script via 'curl | sh'. The latter (curl | sh) is higher-risk; while the script is hosted on GitHub, executing remote install scripts should be treated with caution and preferably inspected before running.
Credentials
The skill declares no required env vars, which aligns with using a CLI-managed AK/SK flow. However, the explicit guidance to send an 'umeng-cli trace' containing the appkey (when the user inputs it) means the skill would transmit a user-provided application identifier to an external telemetry endpoint. That is disproportionate to querying event metrics and risks leaking an app identifier (and possibly other context) without clear user opt-in. The CLI handles AK/SK itself, but the trace behavior is the main proportionality concern.
Persistence & Privilege
The skill does not request 'always: true' and does not declare any config-path or system-wide modifications. It relies on umeng-cli for authentication and credential caching; no additional implicit persistence or elevated privileges are requested by the skill package itself.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install uapp-event
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /uapp-event 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.0
**1.2.0 版为重大变更,已完全切换为 umeng-cli 驱动的 OpenAPI 调用 Skill** - 移除原有自定义 Python 实现(全部 74 个脚本和 SDK 文件已删除,不再内置 Python 调用逻辑) - 替换为 umeng-cli 命令行工具作为唯一调用方式,所有事件查询能力通过 `umeng-cli call` 路由友盟 OpenAPI - 新增对 7 个只读事件相关接口的标准化、详细参数与响应字段说明 - 文档大幅更新:详细描述 umeng-cli 的安装、认证、登录流程,以及接口用法、触发词、入参/出参规范等 - 明确要求 AI Agent 或用户执行埋点上报命令,适配后续运营和数据分析需求
v1.1.0
Version 1.1.0 introduces improved usage guidance and exception handling. - 增加详细使用流程,包括应用名和询问流程(如未提供App名时主动询问等)。 - 明确异常和边界条件处理方式,对事件或数据不存在的场景有更友好提示。 - 新增触发词和典型问法,方便快速上手和内部意图识别。 - 优化 skill 描述与定位,突出主要功能和使用场景。
v1.0.0
Initial release of uapp-event skill for app event analysis: - Supports querying custom event lists, event statistics (trigger counts, unique user counts), and parameter analysis. - Allows event existence checking by event name or display name. - Provides multiple query modes, including pagination and comprehensive metrics. - Enables parameter value distribution and duration statistics. - Offers flexible time range options and JSON output support. - Multiple ways to configure and clear documentation on output behavior and limits.
元数据
Slug uapp-event
版本 1.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

自定义事件数据查询 是什么?

友盟 U-App 自定义事件查询技能,支持通过 umeng-cli call 调用友盟 OpenAPI(gateway.open.umeng.com)的 7 个只读事件查询接口,涵盖事件列表、事件触发次数趋势、事件独立用户数、事件参数列表、参数值分布、指定参数值趋势、参数值时长分布。当用户需要查询自定义事件(埋点... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 140 次。

如何安装 自定义事件数据查询?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install uapp-event」即可一键安装,无需额外配置。

自定义事件数据查询 是免费的吗?

是的,自定义事件数据查询 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

自定义事件数据查询 支持哪些平台?

自定义事件数据查询 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 自定义事件数据查询?

由 Umeng+(@squall0925)开发并维护,当前版本 v1.2.0。

💬 留言讨论