技能详情（站内镜像，无评论）
作者：X @10OSS
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.0.1
统计：⭐ 0 · 88 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：10sk/skroller
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The package is a coherent social‑media scraping tool, but it contains undeclared credential usage, filesystem writes, and explicit anti‑bot/proxy/evasion guidance that increase risk and warrant careful review before use.
目的
The name/description match the code and docs: Playwright-based browser automation across many social platforms, filtering/deduplication, digest generation, and export to note apps. The declared dependencies (playwright in package.json) and included scripts align with the stated purpose.
说明范围
SKILL.md and the scripts instruct the agent to perform broad browser automation, login when needed, persist cookies, write a seen-posts file, and call external services (Notion API, grizzly CLI). The docs also include explicit anti-bot/evading techniques (user-agent rotation, proxy rotation, human mouse simulation, residential proxy vendors) that go beyond benign automation recommendations and may facilitate bypassing platform protections. The…
安装机制
The registry entry provides no install spec, but package.json lists Playwright (a large dependency) meaning users will need to run npm install to use it. There are no suspicious external download URLs; all code is included. The absence of an explicit install/install-time instructions in the registry is notable (user will need to install Node >=18 and run npm install), but not inherently malicious.
证书
The skill's metadata declares no required environment variables, yet the SKILL.md and scripts reference/expect secrets and external credentials (e.g., NOTION_API_KEY / NOTION_TOKEN, MS_TOKEN, and possibly others for note APIs). Exports use process.env.NOTION_API_KEY and command examples show $MS_TOKEN. Those credentials are reasonable for the export features, but they should have been declared in requires.env/primaryEnv. The exporter also runs…
持久
The skill does not request always: true and does not modify other skills. It writes local files (seen posts file, cookies.json, creates notes in user-specified vaults and paths) and may create notes via external services (Notion). Writing to the user's filesystem and storing cookies/seen-posts is expected for a scraper but is persistent behavior the user should be aware of.
scripts/export-to-notes.js:160
Shell command execution detected (child_process).
scripts/skroller.js:28
Dynamic code execution detected.
scripts/export-to-notes.js:232
Environment variable access combined with network send.
scripts/export-to-notes.js:50
File read combined with network send (possible exfiltration).
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「skroller」。简介：Automate scraping and filtering of public social media posts with keyword searc…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/10sk/skroller/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。