📦 Generate Instagram marketing content from product URLs — 生成社媒营销内容
v1.0.0输入 Amazon、Shopify、淘宝等商品链接，自动提取商品信息并生成 Instagram 图文、短视频脚本、吸睛标题、带 CTA 的文案及高互动标签，一站式完成社媒营销素材。
10· 4.0k·7 当前·7 累计
by @insight68下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
medium confidenceThe skill is internally consistent with its stated purpose (fetching product pages and producing Instagram content), but it executes arbitrary HTTP fetches of user-supplied URLs and has some operational/security risks you should consider before use.
评估建议
This skill appears to do what it says — it fetches product pages and builds Instagram-ready content — but it will perform HTTP requests to any URL a user supplies. Before installing or running:
- Understand the network risk: if the agent runs in an environment with access to internal services or cloud metadata (e.g., 169.254.169.254), a malicious or mistaken URL could expose sensitive data (SSRF). Never pass internal or sensitive URLs to the skill.
- Run the skill in a restricted/sandboxed en...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, templates, and the included extract_product.py all align: the skill needs to fetch product pages and produce Instagram content. No unrelated credentials, binaries, or config paths are requested.
⚠ 指令范围
Runtime instructions tell the agent to run scripts/extract_product.py which performs HTTP requests to the user-provided URL and downloads page content/images. This is expected for the purpose, but it means the skill will fetch arbitrary external URLs (including images) and parse their HTML. The instructions do not constrain allowed domains or validate input, creating risk of server-side request forgery (SSRF) or unintended access to internal network endpoints (e.g., cloud metadata services) if the agent runs in a networked environment.
✓ 安装机制
No install spec — instruction-only with a Python script included. No remote downloads or package installs are requested by the registry metadata. The only runtime dependency is the Python packages 'requests' and 'bs4' (BeautifulSoup), which the script checks for and falls back to a manual prompt if absent.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. That is proportionate given its functionality. Note: network access (outbound HTTP) is implicitly required but not declared as an environment requirement.
✓ 持久化与权限
always is false and the skill is user-invocable. It does not request persistent/system-wide privileges nor modify other skills. Autonomous invocation is allowed by default but not an additional privilege here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/2
Initial release of Instagram Marketing Generator - Generate Instagram content from any product URL, extracting product details for optimized posts. - Provides frameworks and templates for feed posts, carousels, stories, reels, and campaigns. - Includes structured image/video briefs, caption templates with hooks and CTAs, and hashtag strategies. - Offers workflow guidance for product analysis, manual/automated extraction, and content formatting. - Reference guides and templates included for multiple industries and content types. - Actionable best practices and tips for captions, visual style, engagement, and posting strategy.
● 无害
安装命令
点击复制官方npx clawhub@latest install instagram-marketing
镜像加速npx clawhub@latest install instagram-marketing --registry https://cn.longxiaskill.com