技能详情(站内镜像,无评论)
作者:子豪 @aizain
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 5 · 550 · 9 current installs · 9 all-time installs
⭐ 5
安装量(当前) 9
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:aizain/web-scout
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The SKILL.md tells the agent to install and run an unpinned GitHub package and to collect/use browser cookies and other service credentials, but the skill metadata declares no dependencies or credentials — the runtime requirements and secret handling are not properly declared and deserve caution.
目的
The described purpose (web data collection) legitimately requires platform credentials, CLI tools, and possibly Docker/MCP services. However, the registry metadata lists no required binaries, no environment variables, and no config paths even though the instructions clearly depend on many external tools (pip, gh CLI, yt-dlp, docker, mcporter/mcporter-related services, Docker images) and credentials (browser cookies, login sessions). This misma…
说明范围
SKILL.md directs the user/agent to: pip install a GitHub main.zip (arbitrary code), run agent-reach install which auto-installs many dependencies, launch Docker containers, configure proxies, and import/export browser cookies (with the explicit instruction to '发给 Agent' — send cookie header string to the agent). It also instructs storing cookies in ~/.agent-reach/config.yaml. These instructions go beyond a simple helper: they require installation of third-party software, user secrets, and starting services on the host.
安装机制
Install is done via pip install of a GitHub archive (https://github.com/.../archive/main.zip). Installing from an unpinned main branch zip can execute arbitrary and changing code and is higher risk than using a pinned release or vetted package. There is no install.spec in the registry (instruction-only), so installing this skill requires running network downloads and package installs outside the registry's control.
证书
Although the skill metadata declares no required credentials, the runtime instructions require sensitive secrets: exported browser cookie strings for Twitter/X and Xiaohongshu, logins for GitHub/LinkedIn, proxy credentials, and potentially Docker image network access. The skill claims cookies are stored locally with file perms 600, but asking users to export and send cookie header strings to an agent expands the attack surface and is not justi…
持久
The skill does not request 'always: true' and does not claim elevated platform privileges. It suggests using agent-reach watch for health checks and has commands to run and uninstall. Autonomous invocation remains possible (platform default) but is not uniquely elevated by this skill. Still, an installed agent-reach tool that can run periodic tasks and hold cookies increases long-term exposure if installed without isolation.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Web Scout」。简介:给 AI Agent 一键装上全网采集能力。基于 Agent Reach,支持 Twitter/X、Reddit、YouTube、B站、小红书、抖音、GitH…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aizain/web-scout/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
---
name: web-scout
description: 给 AI Agent 一键装上全网采集能力。基于 Agent Reach,支持 Twitter/X、Reddit、YouTube、B站、小红书、抖音、GitHub、LinkedIn、Boss直聘、RSS、全网搜索等平台。一条命令安装,零 API 费用。
version: 1.0.0
metadata:
openclaw:
requires:
tools: [exec]
optional:
tools: [web_fetch]
---
# Web Scout — AI Agent 全网采集工具箱
基于 [Agent Reach](https://github.com/Panniantong/Agent-Reach) 封装,让你的 AI Agent 一键获得全网信息采集能力。
## 支持平台
| 平台 | 工具 | 免费 | 需要配置 |
|------|------|------|---------|
| 🌐 网页 | Jina Reader | ✅ | 无 |
| 📺 YouTube | yt-dlp | ✅ | 无 |
| 📺 B站 | yt-dlp | ✅ | 服务器需代理 |
| 📡 RSS | feedparser | ✅ | 无 |
| 🔍 全网搜索 | Exa (MCP) | ✅ | 自动配置 |
| 📦 GitHub | gh CLI | ✅ | 需登录 |
| 🐦 Twitter/X | xreach (bird) | ✅ | 需 Cookie |
| 📖 Reddit | JSON API + Exa | ✅ | 服务器需代理 |
| 📕 小红书 | xiaohongshu-mcp | ✅ | 需 Docker + Cookie |
| 🎵 抖音 | douyin-mcp-server | ✅ | 需 MCP 服务 |
| 💼 LinkedIn | linkedin-mcp | ✅ | 需浏览器登录 |
| 🏢 Boss直聘 | mcp-bosszp | ✅ | 需扫码登录 |
## 安装
### 第一步:安装 Agent Reach CLI
```bash
pip install https://github.com/Panniantong/agent-reach/archive/main.zip
```
### 第二步:自动安装依赖
默认模式(自动安装所有依赖):
```bash
agent-reach install --env=auto
```
安全模式(只检查不安装,适合生产环境):
```bash
agent-reach install --env=auto --safe
```
预览模式(只看会做什么):
```bash
agent-reach install --env=auto --dry-run
```
### 第三步:检查状态
```bash
agent-reach doctor
```
### 第四步:按需配置平台
需要 Cookie 的平台建议使用小号,避免封号风险。
Cookie 导出方法:浏览器登录平台 → 安装 [Cookie-Editor](https://chromewebstore.google.com/detail/cookie-editor/hlkenndednhfkekhgcdicdfddnkalmdm) 插件 → Export → Header String → 发给 Agent。
配置 Twitter:
```bash
agent-reach configure twitter-cookies "COOKIE_STRING"
```
配置代理(服务器访问 Reddit/B站):
```bash
agent-reach configure proxy http://user:pass@ip:port
```
配置小红书(需要 Docker):
```bash
docker run -d --name xiaohongshu-mcp -p 18060:18060 xpzouying/xiaohongshu-mcp
mcporter config add xiaohongshu http://localhost:18060/mcp
```
## 常用命令速查
### 读网页
```bash
curl -s "https://r.jina.ai/URL"
```
### 搜索 Twitter/X
```bash
xreach search "关键词" --json
```
### YouTube/B站 字幕提取
```bash
yt-dlp --dump-json "VIDEO_URL" # 视频信息
yt-dlp --write-sub --skip-download "URL" # 提取字幕
```
### 全网搜索(Exa)
```bash
mcporter call 'exa.search(query: "关键词", numResults: 10)'
```
### GitHub
```bash
gh repo view owner/repo # 查看仓库
gh search repos "关键词" # 搜索仓库
gh issue list -R owner/repo # 查看 Issue
```
### RSS
```bash
python3 -c "import feedparser; f=feedparser.parse('RSS_URL'); [print(e.title) for e in f.entries[:10]]"
```
### 小红书
```bash
mcporter call 'xiaohongshu.search_feeds(keyword: "关键词")'
mcporter call 'xiaohongshu.get_feed_detail(note_id: "ID")'
```
### 抖音
```bash
mcporter call 'douyin.parse_douyin_video_info(share_link: "分享链接")'
```
### Reddit
```bash
mcporter call 'exa.search(query: "site:reddit.com 关键词")'
```
## 维护
检查更新:
```bash
agent-reach check-update
```
升级:
```bash
pip install --upgrade https://github.com/Panniantong/agent-reach/archive/main.zip
```
健康检查(适合定时任务):
```bash
agent-reach watch
```
卸载:
```bash
agent-reach uninstall # 完整卸载
agent-reach uninstall --keep-config # 保留配置
pip uninstall agent-reach # 卸载 Python 包
```
## 安全说明
- Cookie 只存本地 `~/.agent-reach/config.yaml`,文件权限 600
- 代码完全开源,可审查
- 需要 Cookie 的平台(Twitter、小红书)建议用小号
- 支持 `--safe` 和 `--dry-run` 模式
## 致谢
基于 [Agent Reach](https://github.com/Panniantong/Agent-Reach) by Panniantong,MIT 协议。