📦 Linkedin AI Post Builder and Publisher — LinkedIn智能发帖
v1.0.0一键生成并发布LinkedIn动态，实时追踪阅读量、点赞与评论数据，AI自动优化文案与发布时间，助你高效打造个人品牌与内容影响力。
0· 267·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement what it says (posting, analytics, optional AI feedback), but the registry metadata incorrectly claims no required credentials. Before installing: (1) Inspect and control where you store LINKEDIN_CLIENT_SECRET and LINKEDIN_ACCESS_TOKEN (prefer ephemeral tokens and minimal scopes like w_member_social only when needed); (2) If you don't want the AI feedback feature, do not set GEMINI_API_KEY or run the feedback scripts; (3) Check any .env file in the working director...详细分析 ▾
ℹ 用途与能力
The name/description (LinkedIn post builder, analytics, optimizer) matches the scripts and endpoints (LinkedIn API + Google Generative Language). However the skill registry metadata claims no required environment variables or primary credential, while SKILL.md and the scripts clearly require LINKEDIN_CLIENT_ID, LINKEDIN_CLIENT_SECRET, LINKEDIN_ACCESS_TOKEN and optionally GEMINI_API_KEY. That metadata omission is an incoherence and reduces trust.
ℹ 指令范围
SKILL.md limits actions to creating a LinkedIn app, running included helper scripts, posting previews/publishing, and reading/writing a local history file. The scripts read/write expected local files (e.g., linkedin_history.jsonl, ~/.openclaw/workspace/memory/research_notes.md) and call LinkedIn and Google generativelanguage APIs. There are no hidden external endpoints beyond those two services. Minor scope note: the scripts use python-dotenv (load_dotenv()) which will parse a .env file in the working directory and could surface any secrets present there—verify your .env contents before running.
✓ 安装机制
There is no install spec and no remote download: this is an instruction-only skill with included Python scripts. No external archives or URL-based installs were observed.
⚠ 凭证需求
The functionality legitimately needs LinkedIn credentials and (optionally) a Gemini API key, but the skill metadata did not declare these required env vars or a primary credential. Requiring LINKEDIN_CLIENT_SECRET and LINKEDIN_ACCESS_TOKEN is sensitive but proportionate to posting and analytics; requiring GEMINI_API_KEY for optimization is optional but should have been declared. Also, python-dotenv's load_dotenv() means the script may read a local .env file—ensure it doesn't contain unrelated secrets you don't want read/exposed.
✓ 持久化与权限
The skill does not request 'always: true', does not change other skills' configs, and does not request elevated platform-wide privileges. It reads/writes a local history file (linkedin_history.jsonl) which is expected behavior for logging posts.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/12
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install linkedin-ai-optimizer
镜像加速npx clawhub@latest install linkedin-ai-optimizer --registry https://cn.longxiaskill.com