Hv Analysis — 技能工具
v1.1.0横纵分析法深度调研 — 由数字生命卡兹克提出。融合历时-共时分析、纵向发展脉络、横向竞品对比。与 wechat-studio-kh(内容创作+发布)是上下游关系:hv-analysis做深度调研,wechat-studio-kh负责写作发布。触发词:帮我研究一下、深度调研、竞品分析。
0· 2·0 当前·0 累计
安全扫描
OpenClaw
可疑
medium confidenceSkill's research instructions largely match its stated purpose, but there are a few inconsistencies and operational instructions (PDF script referenced but not bundled; pip install with --break-system-packages) that warrant caution before installing or running it.
评估建议
This skill is mostly coherent with its stated purpose (deep research and long-form reports), but you should consider the following before installing or using it: (1) SKILL.md references scripts/md_to_pdf.py but that file is not bundled — ask the author to include the script or remove the PDF instructions so the agent won't fail or try to fabricate local files; (2) the instructions recommend running 'pip install weasyprint markdown --break-system-packages' — that flag is intrusive and can alter s...详细分析 ▾
ℹ 用途与能力
The skill's name/description (deep research using a 横纵分析法) matches the instructions which describe web-based research, source prioritization, and long-form report generation. However, the SKILL.md references a scripts/md_to_pdf.py for PDF generation and claims a 'Skill version' will perform automatic web searches and PDF generation — yet no such script or installer is included in the package. This missing artifact is an inconsistency between claimed capabilities and bundled files.
ℹ 指令范围
Instructions direct the agent to crawl/aggregate public sources (GitHub, arXiv, Reddit, Twitter/X, Zhihu, official blogs, SEC/工商文件) and to synthesize long narrative reports; that is within scope for a research skill. The SKILL.md also includes explicit shell commands (pip install weasyprint markdown --break-system-packages) and a local script invocation (python scripts/md_to_pdf.py) — these are operational steps that could modify the host environment and are not strictly required for the conceptual research method, so they expand the runtime scope beyond pure text synthesis.
⚠ 安装机制
No formal install spec is provided (instruction-only), which is lower risk. However, the instructions advise running pip install weasyprint markdown with --break-system-packages and running a local script to produce PDFs. The pip installs pull from PyPI (not a shortener or unknown server), but the use of --break-system-packages is intrusive (it can alter system packages) and the referenced scripts/md_to_pdf.py is not included. This combination raises operational risk and a potential for unexpected package installation or failed/unsafe operations.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. It does ask the agent to access public web sources for research, which is proportional to the stated purpose. There is no request for unrelated secrets or system-level credentials.
✓ 持久化与权限
The skill does not request always:true and does not declare any persistence or system-wide config changes. Autonomous invocation is enabled by default (disable-model-invocation:false) — this is normal for skills and not by itself a red flag given the rest of the package.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/4/16
Integrated into wechat-studio-kh workflow as upstream research tool. Updated description to note relationship with wechat-studio-kh. Fixed metadata format.
● 可疑
安装命令 点击复制
官方npx clawhub@latest install hv-analysis-kh
镜像加速npx clawhub@latest install hv-analysis-kh --registry https://cn.clawhub-mirror.com
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制