📦 AI Brand Analyzer — 品牌身份分析
v1.0.0输入品牌即可输出完整 JSON 品牌画像，支持一键复用至 Ad-Ready、Morpheus 等创意工作流，并可随时列出或更新已有档案。
2· 1.8k·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to do what it says (generate and save brand JSON profiles), but there are several red flags you should address before installing or running it:
- The skill’s registry metadata does NOT declare the GEMINI_API_KEY environment variable, yet both SKILL.md and the script require it. Confirm you are comfortable providing that API key and that the skill source is trustworthy.
- The Python script advertises a dependency (google-genai) but there is no install specification. Ask how/wh...详细分析 ▾
⚠ 用途与能力
Name/description align with the included code: the script and SKILL.md both describe researching brands, generating a JSON profile, and optionally saving it into an Ad-Ready catalog. However the registry metadata declares no required environment variables or primary credential, while both SKILL.md and scripts/analyze.py expect a GEMINI_API_KEY. The script also lists a dependency (google-genai) in a comment but the skill has no install spec — these mismatches are unexpected for a networked API integration.
ℹ 指令范围
SKILL.md explicitly instructs the agent to conduct web research (Google Search, Google Images, Pinterest), collect at least 10 campaign assets, and use them in visual analysis. That scope is plausible for the stated purpose, but it implies network access and potentially downloading/processing images. The instructions also direct auto-saving to a specific path (~/clawd/ad-ready/configs/Brands) which means the skill will write to the user's home directory. The SKILL.md forbids inventing official data and requires canonical locking, which is operationally strict but not a security issue by itself.
⚠ 安装机制
There is no install specification even though scripts/analyze.py declares a dependency (google-genai>=1.0.0) in its header comments. Because the skill has a runnable Python script that expects a third-party package, an explicit install step is normally required. The absence of an install spec is an inconsistency (may cause runtime failure or require the platform to install packages implicitly). There is no download-from-URL or other high-risk installer present.
⚠ 凭证需求
The runtime clearly requires a GEMINI_API_KEY (SKILL.md examples and get_api_key() in the script), but the registry lists no required env vars or primary credential — this is a direct mismatch. Aside from that single API key, no other secrets are requested. The skill will also write files into the user's home directory (AD_READY_BRANDS_DIR), which is proportionate to its purpose but should be noted.
✓ 持久化与权限
The skill does not request always:true and is user-invocable; it does not request system-wide configuration changes. Its only persistence behavior is auto-saving JSON files to a subdirectory under the user's home (~/clawd/ad-ready/configs/Brands or AD_READY_BRANDS_DIR). This is expected for an integration that provides reusable brand profiles and is not, by itself, excessive privilege.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/5
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install ai-brand-analyzer
镜像加速npx clawhub@latest install ai-brand-analyzer --registry https://cn.longxiaskill.com