← 返回 Skills 市场
131
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install uapp-mini-channel
功能描述
友盟小程序推广渠道/活动/场景效果分析技能，支持通过 umeng-cli call 调用友盟 OpenAPI（gateway.open.umeng.com）的 5 个只读接口，覆盖获客来源排行、渠道/活动/场景值明细统计与趋势分析。当用户需要了解小程序的获客来源、渠道/活动/场景效果、Top 排行、趋势分析时使用...
安全使用建议
This skill appears to do what it says (read-only Umeng analytics queries) but includes two things you should review before installing: (1) SKILL.md instructs the agent to run `umeng-cli trace` immediately and to send the AppKey in a later trace — this transmits telemetry/identifiers to Umeng and could leak sensitive info without explicit consent; consider removing or prompting the user before any trace call. (2) The README recommends installing via `curl | sh`; prefer audited installs (npm from the official package) or review the install script first. Also confirm the registry metadata is corrected so the platform shows the umeng-cli dependency. If the author can remove automatic trace calls or make them explicitly opt-in, and the install method is clarified, the skill would be much less concerning.
功能分析
Type: OpenClaw Skill
Name: uapp-mini-channel
Version: 1.2.0
The skill contains instructions in SKILL.md directing the AI agent to automatically execute background telemetry commands (`umeng-cli trace`) that report the user's 'appkey' (dataSourceId) to the CLI tool provider. Additionally, it promotes a high-risk installation method (`curl | sh`) for its primary dependency. While these actions are likely intended for usage analytics and deployment convenience within the Umeng ecosystem, the automated exfiltration of identifiers and the recommendation of insecure installation patterns qualify as suspicious behavior.
能力标签
能力评估
Purpose & Capability
The skill is clearly focused on read-only Umeng U-MiniProgram analytics and declares the dependency on the umeng-cli tool in SKILL.md, which is coherent. However, the registry metadata provided to the platform claimed no required binaries/envs while SKILL.md lists 'umeng-cli' as a required binary and provides an install command — this metadata mismatch should be corrected.
Instruction Scope
SKILL.md directs the agent to run `umeng-cli trace` immediately after reading the skill and again (with the user's AppKey) before the first API call. Those trace calls transmit telemetry to Umeng and will include the skill name and potentially the AppKey; telemetry is not necessary for the core read-only querying and effectively causes external reporting of user-sensitive context (AppKey). The instructions also tell the agent to run `umeng-cli login --no-qr`, which will open an authentication flow and cause the CLI to cache AK/SK — that is expected but should be explicit to users. The combination of automatic telemetry and instructions to include AppKey in a trace is scope creep and an exfiltration risk unless user consent is obtained.
Install Mechanism
Installation is instruction-only and recommends `npm install -g @umengfe/umeng-cli` or running an official install script from the project's GitHub via `curl | sh`. Installing from npm or the project's official GitHub repo is common and reasonable, but piping a remote install script to sh is higher-risk and should be inspected or replaced with a vetted package install when possible.
Credentials
The skill does not declare required environment variables, which is fine because authentication is handled by umeng-cli. However, SKILL.md instructs sending the AppKey in a trace call and performing CLI login that stores AK/SK locally. Asking to include the AppKey in telemetry and to automatically invoke telemetry is disproportionate to the stated read-only query purpose and may leak sensitive identifiers to the Umeng service without explicit, per-use user consent.
Persistence & Privilege
The skill does not request elevated platform privileges or 'always: true'. It relies on umeng-cli which will locally cache AK/SK after login — expected behavior for a CLI client. There is no instruction to modify other skills or global agent config.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install uapp-mini-channel - 安装完成后，直接呼叫该 Skill 的名称或使用
/uapp-mini-channel触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.0
**重大变更：全面切换至 umeng-cli 工具，精简 Skill 实现，仅保留元数据与详尽文档。**
- 移除所有内置脚本与 SDK 相关文件，改为完全通过 umeng-cli 调用友盟 OpenAPI。
- Skill 名称调整为 umeng-cli-uapp-mini-channel，并更新描述与元信息，明确依赖 umeng-cli。
- 新版 SKILL.md 支持 5 个指定只读接口，覆盖获客来源排行、渠道/活动/场景效果及趋势。
- 明确不支持 Android/iOS App，仅支持小程序/H5/小游戏。
- 提供丰富用法示例和细粒度参数说明，引导用户通过 umeng-cli 完成所有操作。
v1.1.0
Version 1.1.0 adds usage flow, clarification, and exception handling details:
- Introduced a structured使用流程 (usage flow), including steps for confirming app name, intent, and output interpretation.
- Added a边界条件与异常处理 (edge-case handling) section, specifying responses for various error or unclear inputs.
- Updated description for clearer trigger words and intended scenarios.
- Retained parameter mappings, usage examples, and technical details from prior versions.
- No changes to code; all improvements are in documentation and skill guidance.
v1.0.0
Initial release of the uapp-mini-channel skill for querying Youmeng mini-program promotion channels.
- Supports customer source ranking, promotion channel/activity/scene statistics, and trend analysis.
- Provides multiple query modes with flexible CLI parameters for channels, campaigns, scenes, and lists.
- Allows time range selection, trend metrics, custom indicators, and structured JSON output.
- Offers detailed usage examples and configuration options for quick integration.
元数据
常见问题
小程序推广渠道查询 是什么？
友盟小程序推广渠道/活动/场景效果分析技能，支持通过 umeng-cli call 调用友盟 OpenAPI（gateway.open.umeng.com）的 5 个只读接口，覆盖获客来源排行、渠道/活动/场景值明细统计与趋势分析。当用户需要了解小程序的获客来源、渠道/活动/场景效果、Top 排行、趋势分析时使用... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 131 次。
如何安装 小程序推广渠道查询？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install uapp-mini-channel」即可一键安装，无需额外配置。
小程序推广渠道查询 是免费的吗？
是的，小程序推广渠道查询 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
小程序推广渠道查询 支持哪些平台？
小程序推广渠道查询 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 小程序推广渠道查询？
由 Umeng+（@squall0925）开发并维护，当前版本 v1.2.0。
推荐 Skills