by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and implements what it says: it queries the public hn.algolia.com API, scores posts for buying intent, and prints results. Before installing or running: 1) ensure you have Node.js >=18 (package.json specifies this); 2) be aware it makes outbound HTTPS requests to hn.algolia.com (no hidden endpoints or credentials); 3) if you plan to reach out to leads found, follow Hacker News community norms and disclose affiliations; 4) review the included hn-prospecting.js source y...详细分析 ▾
✓ 用途与能力
Name/description claim lead discovery on Hacker News; included code implements searches against hn.algolia.com, scoring, and CLI usage. Requested resources (none) align with this purpose.
✓ 指令范围
SKILL.md directs the agent to run the bundled Node.js CLI and use the Algolia HN API. The runtime instructions and code only access Hacker News data and print/return analyses; they do not read unrelated files or environment variables.
✓ 安装机制
No install spec; this is an instruction+code skill that runs with Node.js. No downloads from arbitrary URLs or packaged install steps are present.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. package.json declares no required env. Network access to hn.algolia.com is expected and proportional to the function.
✓ 持久化与权限
Skill is user-invocable and not always-enabled. It does not modify other skills or system-wide settings and does not request persistent privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/22
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install hn-prospecting
镜像加速npx clawhub@latest install hn-prospecting --registry https://cn.longxiaskill.com镜像同步中