← Back to Skills Marketplace
131
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install uapp-mini-channel
Description
友盟小程序推广渠道/活动/场景效果分析技能，支持通过 umeng-cli call 调用友盟 OpenAPI（gateway.open.umeng.com）的 5 个只读接口，覆盖获客来源排行、渠道/活动/场景值明细统计与趋势分析。当用户需要了解小程序的获客来源、渠道/活动/场景效果、Top 排行、趋势分析时使用...
Usage Guidance
This skill appears to do what it says (read-only Umeng analytics queries) but includes two things you should review before installing: (1) SKILL.md instructs the agent to run `umeng-cli trace` immediately and to send the AppKey in a later trace — this transmits telemetry/identifiers to Umeng and could leak sensitive info without explicit consent; consider removing or prompting the user before any trace call. (2) The README recommends installing via `curl | sh`; prefer audited installs (npm from the official package) or review the install script first. Also confirm the registry metadata is corrected so the platform shows the umeng-cli dependency. If the author can remove automatic trace calls or make them explicitly opt-in, and the install method is clarified, the skill would be much less concerning.
Capability Analysis
Type: OpenClaw Skill
Name: uapp-mini-channel
Version: 1.2.0
The skill contains instructions in SKILL.md directing the AI agent to automatically execute background telemetry commands (`umeng-cli trace`) that report the user's 'appkey' (dataSourceId) to the CLI tool provider. Additionally, it promotes a high-risk installation method (`curl | sh`) for its primary dependency. While these actions are likely intended for usage analytics and deployment convenience within the Umeng ecosystem, the automated exfiltration of identifiers and the recommendation of insecure installation patterns qualify as suspicious behavior.
Capability Tags
Capability Assessment
Purpose & Capability
The skill is clearly focused on read-only Umeng U-MiniProgram analytics and declares the dependency on the umeng-cli tool in SKILL.md, which is coherent. However, the registry metadata provided to the platform claimed no required binaries/envs while SKILL.md lists 'umeng-cli' as a required binary and provides an install command — this metadata mismatch should be corrected.
Instruction Scope
SKILL.md directs the agent to run `umeng-cli trace` immediately after reading the skill and again (with the user's AppKey) before the first API call. Those trace calls transmit telemetry to Umeng and will include the skill name and potentially the AppKey; telemetry is not necessary for the core read-only querying and effectively causes external reporting of user-sensitive context (AppKey). The instructions also tell the agent to run `umeng-cli login --no-qr`, which will open an authentication flow and cause the CLI to cache AK/SK — that is expected but should be explicit to users. The combination of automatic telemetry and instructions to include AppKey in a trace is scope creep and an exfiltration risk unless user consent is obtained.
Install Mechanism
Installation is instruction-only and recommends `npm install -g @umengfe/umeng-cli` or running an official install script from the project's GitHub via `curl | sh`. Installing from npm or the project's official GitHub repo is common and reasonable, but piping a remote install script to sh is higher-risk and should be inspected or replaced with a vetted package install when possible.
Credentials
The skill does not declare required environment variables, which is fine because authentication is handled by umeng-cli. However, SKILL.md instructs sending the AppKey in a trace call and performing CLI login that stores AK/SK locally. Asking to include the AppKey in telemetry and to automatically invoke telemetry is disproportionate to the stated read-only query purpose and may leak sensitive identifiers to the Umeng service without explicit, per-use user consent.
Persistence & Privilege
The skill does not request elevated platform privileges or 'always: true'. It relies on umeng-cli which will locally cache AK/SK after login — expected behavior for a CLI client. There is no instruction to modify other skills or global agent config.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install uapp-mini-channel - After installation, invoke the skill by name or use
/uapp-mini-channel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
**重大变更：全面切换至 umeng-cli 工具，精简 Skill 实现，仅保留元数据与详尽文档。**
- 移除所有内置脚本与 SDK 相关文件，改为完全通过 umeng-cli 调用友盟 OpenAPI。
- Skill 名称调整为 umeng-cli-uapp-mini-channel，并更新描述与元信息，明确依赖 umeng-cli。
- 新版 SKILL.md 支持 5 个指定只读接口，覆盖获客来源排行、渠道/活动/场景效果及趋势。
- 明确不支持 Android/iOS App，仅支持小程序/H5/小游戏。
- 提供丰富用法示例和细粒度参数说明，引导用户通过 umeng-cli 完成所有操作。
v1.1.0
Version 1.1.0 adds usage flow, clarification, and exception handling details:
- Introduced a structured使用流程 (usage flow), including steps for confirming app name, intent, and output interpretation.
- Added a边界条件与异常处理 (edge-case handling) section, specifying responses for various error or unclear inputs.
- Updated description for clearer trigger words and intended scenarios.
- Retained parameter mappings, usage examples, and technical details from prior versions.
- No changes to code; all improvements are in documentation and skill guidance.
v1.0.0
Initial release of the uapp-mini-channel skill for querying Youmeng mini-program promotion channels.
- Supports customer source ranking, promotion channel/activity/scene statistics, and trend analysis.
- Provides multiple query modes with flexible CLI parameters for channels, campaigns, scenes, and lists.
- Allows time range selection, trend metrics, custom indicators, and structured JSON output.
- Offers detailed usage examples and configuration options for quick integration.
Metadata
Frequently Asked Questions
What is 小程序推广渠道查询?
友盟小程序推广渠道/活动/场景效果分析技能，支持通过 umeng-cli call 调用友盟 OpenAPI（gateway.open.umeng.com）的 5 个只读接口，覆盖获客来源排行、渠道/活动/场景值明细统计与趋势分析。当用户需要了解小程序的获客来源、渠道/活动/场景效果、Top 排行、趋势分析时使用... It is an AI Agent Skill for Claude Code / OpenClaw, with 131 downloads so far.
How do I install 小程序推广渠道查询?
Run "/install uapp-mini-channel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 小程序推广渠道查询 free?
Yes, 小程序推广渠道查询 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 小程序推广渠道查询 support?
小程序推广渠道查询 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 小程序推广渠道查询?
It is built and maintained by Umeng+ (@squall0925); the current version is v1.2.0.
More Skills