技能详情（站内镜像，无评论）
作者：Andrey Mashukov @AndreMashukov
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 33 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：andremashukov/openclaw-trends
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code mostly matches its stated purpose, but it embeds a hardcoded YouTube API key and the SKILL.md/code request an API key without declaring it in metadata — this mismatch and the hardcoded credential are concerning.
目的
The name/description (fetch OpenClaw trends) aligns with the included script's behavior (YouTube, GitHub, web scraping). However, the SKILL.md and script mention a YouTube Data API key (and the script contains a hardcoded default key) while the registry metadata declares no required environment variables/credentials — an inconsistency that should be explained.
说明范围
The SKILL.md and script limit actions to web queries (YouTube API, DuckDuckGo HTML scraping, gh CLI). They do not read arbitrary local files. Concerns: (1) SKILL.md suggests scheduled cron usage (fine but makes automated periodic runs easier), and (2) the script hardcodes a Google API key and will make outbound requests that reveal usage to the key owner. The instructions also reference an integration ('OpenClaw message tool') that is not impl…
安装机制
No install spec — instruction-only with an included Python script. This is low-risk from an install mechanism perspective because nothing is downloaded or executed automatically during installation.
证书
The script uses a YOUTUBE_API_KEY environment variable but falls back to a hardcoded API key in code. The registry declares no required env vars/credentials — this mismatch is disproportionate and risky because the embedded key will attribute all API requests to that key's owner and could leak query data to them. No other unnecessary credentials are requested.
持久
The skill does not request permanent 'always' inclusion, does not modify other skills/config, and only suggests (optional) cron scheduling. No privileged persistence is requested by the skill itself.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「OpenClaw Trends」。简介：Fetch and aggregate OpenClaw-related content from across the internet. Use when…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/andremashukov/openclaw-trends/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: openclaw-trends
description: Fetch and aggregate OpenClaw-related content from across the internet. Use when the user asks about OpenClaw trends, news, tutorials, videos, community discussions, or what people are saying about OpenClaw. Triggers on phrases like "what's new with OpenClaw", "find OpenClaw tutorials", "OpenClaw news", "OpenClaw YouTube videos", or checking for OpenClaw mentions online.
---
# OpenClaw Trends
Fetch trending content about OpenClaw from multiple sources and deliver a summary.
## Quick Start
```bash
python3 scripts/fetch_trends.py [--days 3] [--output json|text]
```
## Workflow
1. **Fetch from sources**:
- **YouTube** - Videos (Data API v3)
- **GitHub** - Repos, discussions, releases
- **X/Twitter** - Posts (web search)
- **Reddit** - Discussions (web search)
- **Hacker News** - Tech discussions (web search)
2. **Filter by freshness**: Default 2-3 days
3. **Deduplicate & rank**: Remove duplicates, sort by date
4. **Output**: Structured summary with links
## Notes
- **YouTube** uses Data API v3 (key embedded for convenience)
- **X/Twitter, Reddit, HN** use DuckDuckGo web search (no API needed)
- **GitHub** uses `gh` CLI (auto-detected)
- For agent-triggered runs, the `web_search` tool provides richer results
## Output Format
Returns a structured summary:
- **Source** (YouTube, X, Blog, etc.)
- **Title**
- **Description** (truncated)
- **URL**
- **Date**
## Scheduled Checks
For daily updates, add to cron:
```bash
# Daily OpenClaw trends at 9 AM
0 9 * * * cd ~/.openclaw/workspace/skills/openclaw-trends && python3 scripts/fetch_trends.py --days 3 --notify
```
## Notes
- YouTube uses Data API v3 (requires key)
- X/Twitter uses web search (no API needed)
- GitHub uses `gh` CLI or REST API
- All other sources use web search