📦 Review Summarizer — 评论摘要
v1.0.0一键抓取并智能汇总 Amazon、Google、Yelp、TripAdvisor 等多平台商品评论，自动提取核心观点、情感倾向、优缺点与购买建议，助您快速完成套利调研、联盟内容创作或消费决策。
3· 2.1k·8 当前·8 累计
by 下载技能包
最后更新
2026/2/28
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill is internally inconsistent: it advertises multi-platform web scraping and API integration but the shipped code only uses local MOCK_REVIEWS and no network/API calls. Before installing or relying on it: 1) If you expect live scraping, inspect and modify scrape_reviews.py — implement proper API clients or HTTP scraping and add secure handling for any API keys (do not hard-code secrets). 2) Verify Terms of Service and legal/privacy implications for scraping each platform. 3) Run the scri...详细分析 ▾
⚠ 用途与能力
The README/description claims the skill scrapes Amazon, Google, Yelp, and TripAdvisor and integrates with their APIs, but the actual scraping implementation (scripts/scrape_reviews.py) returns hard-coded MOCK_REVIEWS and contains only comments about 'In production, integrate with:' APIs. There are no network calls or API integrations, no required credentials declared, and no real scraping logic. That is a substantive mismatch between the advertised purpose and the provided capability.
⚠ 指令范围
SKILL.md instructs the agent/user to run the provided scripts with product URLs as if they will fetch live reviews. The scripts accept URL and platform arguments, but scrape_reviews.py uses local mock data and will not retrieve external reviews. The instructions do not ask for credentials or API keys (even though real integrations would normally require them), which makes the runtime instructions misleading for someone expecting live scraping. The scripts only read/write files relevant to their task and do not reference unrelated system files or env vars.
✓ 安装机制
There is no install spec (instruction-only metadata) and the repository contains plain Python scripts. No external installers, downloads, or archive extraction are specified. Risk from installation mechanism is low.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths and none are needed by the included code. This is proportional to the actual (mock) implementation, but inconsistent with the written promise to integrate with third-party APIs — those would normally require credentials.
✓ 持久化与权限
The skill does not request permanent presence (always: false) and contains no code that modifies other skills or system-wide agent settings. Scripts write output files as expected for a reporting tool; there is no evidence of elevated persistence or privilege requests.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/4
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install review-summarizer
镜像加速npx clawhub@latest install review-summarizer --registry https://cn.longxiaskill.com