📉 Amplitude
v1.0.0Amplitude product analytics — track events, analyze user behavior, run cohort analysis, manage user properties, and query funnel/retention data via the Ampli...
0· 633·3 当前·3 累计
by 安全扫描
OpenClaw
可疑
high confidenceThe skill mostly matches an Amplitude CLI but it requests an unused secret and reads a local workspace .env file unexpectedly — the requested credentials and file access are disproportionate to the stated purpose.
评估建议
This skill mostly looks like an Amplitude CLI, but there are two issues to consider before installing: (1) the manifest asks for AMPLITUDE_SECRET_KEY even though the shipped script never uses it — ask the author why that secret is required or remove it. (2) if AMPLITUDE_API_KEY isn't in the environment, the script will read a .env file from your workspace (~/.openclaw/workspace/.env or a path from WORKSPACE). That means the skill will access local files for credentials; ensure that .env doesn't ...详细分析 ▾
⚠ 用途与能力
The skill claims to integrate with Amplitude and requires AMPLITUDE_API_KEY and AMPLITUDE_SECRET_KEY. The implementation only uses AMPLITUDE_API_KEY; AMPLITUDE_SECRET_KEY is declared but never read or used. Requesting a secret key that the code doesn't use is disproportionate and inconsistent with the stated purpose.
⚠ 指令范围
SKILL.md states 'never stores data locally' and that only the Amplitude API is contacted, but the CLI code will, if the AMPLITUDE_API_KEY env var is not set, try to read a .env file from a workspace path (WORKSPACE or ~/.openclaw/workspace/.env). That is file access outside the Amplitude API and may expose other local secrets if the .env contains them (the code only parses lines beginning with AMPLITUDE_API_KEY=, but reading local workspace files is scope creep relative to the documentation).
✓ 安装机制
No install spec — instruction-only plus a Python script that relies on stdlib only. No external downloads or installers are declared, which is low-risk from an install-mechanism perspective.
⚠ 凭证需求
The skill requires two environment variables (AMPLITUDE_API_KEY and AMPLITUDE_SECRET_KEY). The code only reads AMPLITUDE_API_KEY (and will fall back to parsing a local .env for it). AMPLITUDE_SECRET_KEY is not used anywhere in the script, so requesting it is unnecessary and disproportionate. Additionally, the fallback to reading a workspace .env file can surface secrets stored there.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills or global agent configuration, and does not write persistent files. It only reads a workspace .env file as a fallback and otherwise sends requests to amplitude.com.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/19
- Initial release of the Amplitude product analytics skill. - Track events, analyze user behavior, run cohort and funnel analyses, manage user properties, and perform retention and revenue analysis via the Amplitude API. - Includes segmentation, event segmentation, dashboard export, and comprehensive CLI commands. - Requires only Python 3.10+ standard library (no external dependencies). - Secure: no data stored locally; all operations performed via direct API calls.
● 可疑
安装命令 点击复制
官方npx clawhub@latest install amplitude
镜像加速npx clawhub@latest install amplitude --registry https://cn.clawhub-mirror.com
技能文档
Amplitude product analytics — track events, analyze user behavior, run cohort analysis, manage user properties, and query funnel/retention data via the Amplitude API.
Features
- Event tracking — log user events with properties
- User analytics — active users, sessions, engagement
- Funnel analysis — conversion through event sequences
- Retention analysis — user return rates over time
- Cohort management — create and manage user cohorts
- User properties — set and query user attributes
- Revenue analytics — LTV, ARPU, revenue tracking
- Segmentation — query by properties and events
- Event segmentation — event counts and breakdowns
- Dashboard export — export chart data
Requirements
| Variable | Required | Description |
|---|---|---|
AMPLITUDE_API_KEY | ✅ | API key/token for Amplitude |
AMPLITUDE_SECRET_KEY | ✅ | Amplitude secret key for Export/Dashboard APIs |
Quick Start
# Track an event
python3 {baseDir}/scripts/amplitude.py track '{"user_id":"user123","event_type":"purchase","event_properties":{"amount":29.99}}'
# Track batch events
python3 {baseDir}/scripts/amplitude.py track-batch events.json
# Set user properties
python3 {baseDir}/scripts/amplitude.py identify '{"user_id":"user123","user_properties":{"plan":"pro","company":"Acme"}}'
# Get active user counts
python3 {baseDir}/scripts/amplitude.py active-users --start 2026-01-01 --end 2026-02-01
Commands
track
Track an event.
python3 {baseDir}/scripts/amplitude.py track '{"user_id":"user123","event_type":"purchase","event_properties":{"amount":29.99}}'
track-batch
Track batch events.
python3 {baseDir}/scripts/amplitude.py track-batch events.json
identify
Set user properties.
python3 {baseDir}/scripts/amplitude.py identify '{"user_id":"user123","user_properties":{"plan":"pro","company":"Acme"}}'
active-users
Get active user counts.
python3 {baseDir}/scripts/amplitude.py active-users --start 2026-01-01 --end 2026-02-01
events
Get event data.
python3 {baseDir}/scripts/amplitude.py events --start 2026-01-01 --end 2026-02-01 --event purchase
funnel
Run funnel analysis.
python3 {baseDir}/scripts/amplitude.py funnel '{"events":[{"event_type":"page_view"},{"event_type":"signup"},{"event_type":"purchase"}]}' --start 2026-01-01 --end 2026-02-01
retention
Retention analysis.
python3 {baseDir}/scripts/amplitude.py retention --start 2026-01-01 --end 2026-02-01
cohorts
List cohorts.
python3 {baseDir}/scripts/amplitude.py cohorts
cohort-get
Get cohort details.
python3 {baseDir}/scripts/amplitude.py cohort-get abc123
revenue
Revenue analysis.
python3 {baseDir}/scripts/amplitude.py revenue --start 2026-01-01 --end 2026-02-01
user-search
Search for a user.
python3 {baseDir}/scripts/amplitude.py user-search "user@example.com"
user-activity
Get user activity.
python3 {baseDir}/scripts/amplitude.py user-activity user123
segments
Event segmentation query.
python3 {baseDir}/scripts/amplitude.py segments --event purchase --group-by platform --start 2026-01-01 --end 2026-02-01
Output Format
All commands output JSON by default. Add --human for readable formatted output.
# JSON (default, for programmatic use)
python3 {baseDir}/scripts/amplitude.py track --limit 5# Human-readable
python3 {baseDir}/scripts/amplitude.py track --limit 5 --human
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/amplitude.py | Main CLI — all Amplitude operations |
Data Policy
This skill never stores data locally. All requests go directly to the Amplitude API and results are returned to stdout. Your data stays on Amplitude servers.
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制