📦 App Store Optimization — 应用商店优化
v2.1.1一站式ASO工具箱，可研究关键词、分析竞品排名、自动生成元数据建议，全面提升App在应用商店的搜索曝光与下载转化。
4· 2.5k·14 当前·14 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's files and workflows match its ASO description, but there are inconsistencies and missing operational detail (no dependency/install spec, no explanation of how live App Store/Play data or search volumes are obtained, and non-trivial Python code is included) that warrant caution before running it.
评估建议
This skill appears to actually implement an ASO toolkit (the Python scripts line up with the advertised features), but there are important unknowns you should resolve before installing or executing anything: 1) Ask the author how the scripts obtain live App Store / Google Play data and search-volume estimates. If they require API access, request explicit instructions and which credentials are needed. 2) Request a requirements.txt or dependency list and run the code only in a controlled environme...详细分析 ▾
ℹ 用途与能力
The name, description, SKILL.md workflows, and included Python modules (keyword_analyzer, competitor_analyzer, metadata_optimizer, aso_scorer, ab_test_planner, localization_helper, review_analyzer, launch_checklist) are coherent with an ASO toolkit. However, the skill claims capabilities that normally require external data (app store metadata, rankings, search volume) yet does not declare any required API keys, credentials, or explain the data source. That omission is unexpected and reduces clarity about how the tool obtains live store data.
⚠ 指令范围
SKILL.md and HOW_TO_USE explicitly instruct usage of the included Python scripts for research/analysis. The instructions request user-provided data in many cases (reviews, metrics, competitor app names), which is appropriate, but they do not explain how the scripts fetch live store metadata/rankings or search volumes. The runtime instructions assume the agent or user will run the Python modules but do not list required Python, libraries, or run commands. Running unreviewed scripts that may perform network access or scraping is a meaningful scope risk.
ℹ 安装机制
There is no install spec (instruction-only from the registry perspective) but the package ship includes eight sizable Python modules and multiple docs. No requirements.txt, no dependency list, and no platform install steps for Python packages are provided. That makes runtime behavior unclear (dependencies may be missing) and increases the chance someone will execute code without understanding its external dependencies or side effects. There is no download-from-URL risk in the registry metadata itself.
ℹ 凭证需求
The skill requests no environment variables or credentials, which is good from a secrets-exfiltration standpoint. At the same time, many of the advertised features (live rankings, search volume estimates, automated competitor extraction) typically require network access and/or API credentials; the SKILL.md instead leans on the user supplying data or the scripts performing their own fetches, but it does not state which approach is used. This mismatch (complex capability but no declared data-source credentials) is an unexplained gap.
✓ 持久化与权限
The skill is not marked always:true and does not request system-wide config changes. It is user-invocable and allows normal autonomous invocation. There is no evidence in the metadata that it modifies other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.1.12026/2/2
v2.1.1: optimization, reference splits
● 无害
安装命令
点击复制官方npx clawhub@latest install app-store-optimization
镜像加速npx clawhub@latest install app-store-optimization --registry https://cn.longxiaskill.com