by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's purpose (audience personas) matches the included script's behavior, but the script invokes the local 'openclaw' CLI and python3 without declaring those dependencies and will send your input to a model run — review before installing or running.
评估建议
Before installing or running this skill: (1) Inspect analyze.sh yourself — it sends whatever you pass as the audience prompt to 'openclaw agent --local', so sensitive or proprietary input will be forwarded to your agent/model runtime. (2) Ensure you trust the local OpenClaw CLI and its configured model backend. (3) Note that python3 and the openclaw CLI are required but not declared; do not run the script in an environment where those binaries or credentials are unknown. (4) If you want to minim...详细分析 ▾
ℹ 用途与能力
The skill's stated purpose (build audience personas) aligns with the included analyze.sh which builds a prompt and generates persona text. However, the skill manifest declares no required binaries while the script clearly requires the 'openclaw' CLI and python3 (and implicitly a working CLI model backend). This is a mismatch between declared requirements and actual actions.
⚠ 指令范围
SKILL.md itself is scoped to persona generation, but analyze.sh constructs a prompt from user input and runs 'openclaw agent --local' which performs a model invocation using local agent context. That means any input you pass to the script is forwarded to the agent/model run (and potentially outbound network calls handled by the agent). The instructions do not declare or warn about that data flow.
ℹ 安装机制
There is no install spec (instruction-only), which is low-risk for installation artifacts. However, the skill ships a runnable shell script (analyze.sh) that will be executed by the agent environment; no archives or external downloads are performed.
ℹ 凭证需求
No environment variables or credentials are requested in metadata. That said, the script implicitly relies on the local 'openclaw' agent runtime (which may use local config or credentials) and on python3 being present. Those implicit dependencies are not declared.
✓ 持久化与权限
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It simply invokes the local agent at runtime; it does not install persistent components.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/23
- Initial release of Social Audience Profiler. - Generates three in-depth audience personas for social media strategy. - Includes psychographics, pain point analysis, content preferences, and platform behavior. - Helps build highly targeted messaging for each persona. - Triggered by keywords like "target audience", "audience persona", and "ICP social media".
● stale
安装命令
点击复制官方npx clawhub@latest install social-audience-profiler
镜像加速npx clawhub@latest install social-audience-profiler --registry https://cn.longxiaskill.com镜像同步中