技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 257 · 1 current installs · 1 all-time installs
⭐ 0
安装量（当前） 1
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：avnikulin35/opportunity-scout
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's purpose (scouting opportunities) matches the included scoring script, but the runtime instructions ask the agent to exec external CLIs (e.g., bird, clawdhub) without declaring required binaries or credential needs — this mismatch and implicit use of local CLI credentials is concerning.
目的
The name/description and the included scoring script are coherent for an 'opportunity scout'. However SKILL.md tells the agent to run external CLIs (bird, clawdhub) and use web_search/Reddit/ProductHunt. The skill declares no required binaries, no install steps, and requests no credentials — yet the instructions assume availability of tools that normally require installation and stored credentials. That omission is an inconsistency that could …
说明范围
Instructions focus on web/Twitter/Product Hunt/Reddit searches and scoring, which is within stated scope. However the SKILL.md explicitly instructs exec of 'bird' (Twitter CLI) and 'clawdhub' which are shell commands that will perform network calls and may read local CLI config (tokens). The skill does not instruct reading arbitrary local files or env vars, but execing CLIs can implicitly access local credentials/config — the instructions shou…
安装机制
No install spec is provided (instruction-only plus a small scoring script). That is lowest-risk from an installation/extraction perspective. The included Python script is straightforward and local-only (scoring/report generation) with no hidden network calls, obfuscation, or extraction behavior.
证书
The skill declares no required environment variables or credentials, yet it attempts to query services (Twitter) via a CLI that typically requires authentication. This is disproportionate: either credentials should be declared (and scoped) or instructions should use unauthenticated web_search calls. The implicit reliance on local CLI-auth (which may use stored tokens) is a privacy/credential risk that is not documented.
持久
The skill does not request always:true, does not modify other skills, and contains no code that persists or escalates privileges. It appears to run only when invoked.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「AI Opportunity Scout」。简介：Find profitable business opportunities in any niche by scanning Twitter, web, R…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/avnikulin35/opportunity-scout/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。