Web Scout

给 AI Agent 一键装上全网采集能力。基于 Agent Reach，支持 Twitter/X、Reddit、YouTube、B站、小红书、抖音、GitHub、LinkedIn、Boss直聘、RSS、全网搜索等平台。一条命令安装，零 API 费用。

This skill is suspicious because its runtime steps require many tools and sensitive credentials that are not declared in the metadata. Before installing: 1) Inspect the GitHub repo (prefer a pinned release/tag, not main.zip) and review the code you will pip-install. 2) Run any install inside an isolated environment (VM or container) and use a Python venv; avoid installing directly on a production host. 3) Use --dry-run or --safe modes first to see what would be installed. 4) Never paste your primary account cookies/API keys into an agent; use throwaway/test accounts if you must provide cookies, and verify where and how they are stored (~/.agent-reach/config.yaml). 5) Verify any Docker images (e.g., xpzouying/xiaohongshu-mcp) on Docker Hub and prefer self-hosted audited alternatives. 6) Require the publisher to update the skill metadata to list required binaries and secrets; if they cannot justify the missing declarations, avoid installing. If you want, I can produce a short checklist of specific files/commands to audit in the referenced repo before you proceed.

Type: OpenClaw Skill Name: web-scout Version: 1.0.0 This skill bundle is classified as suspicious due to its explicit requirement for the `exec` tool, which enables arbitrary shell command execution, creating a significant attack surface for prompt injection. Key indicators include instructions to run `docker run` with an external image (`xpzouying/xiaohongshu-mcp`) and examples of `python3 -c` execution, both found in `SKILL.md`. While these capabilities are presented for the stated purpose of web scouting, they introduce high-risk vulnerabilities and supply chain risks, allowing for potential arbitrary code execution and host compromise if the agent is prompted maliciously or if external dependencies are compromised. There is no clear evidence of intentional malicious behavior by the skill itself, but rather a collection of powerful, risky capabilities.