zhiliao

知了 - AI 话题追踪与资讯聚合服务。通过自然语言创建追踪话题，自动从全网聚合相关文章并定时更新。适用场景：(1) 创建信息追踪话题（如追踪黄金价格、科技新闻、行业动态），(2) 获取和浏览话题下的聚合文章，(3) 设置定时任务定期抓取新文章，(4) 查看/管理话题列表，(5) 取消订阅不需要的话题。触发关键词...

What to consider before installing: - The core scripts appear coherent for a news/topic aggregator and legitimately require only ZHILIAO_API_KEY. You should provide your own API key rather than using any key bundled in the repository. - The package includes .claude/settings.local.json which lists many broad file/command permissions and contains an apparent hard-coded API key string. Treat that file as suspicious: do not run or import its commands as-is. Remove or inspect it before use. - Inspect the included shell scripts yourself; they only contact api-public.zhiliao.news and store files under ~/.zhiliao. If you accept the skill, configure ZHILIAO_API_KEY via an environment variable or local config and do not accept or paste any keys found in the bundle. - Rotate the API key if you previously used the hard-coded key anywhere, and never publish your personal API key. If you plan to add cron jobs, ensure they run under the intended account and not as root. - If you want stronger assurance: run the scripts in a sandboxed environment, review the .claude/settings.local.json (or delete it), and confirm the remote endpoints (api-public.zhiliao.news / h5.zhiliao.news) are legitimate before providing credentials. If you want, I can extract and show just the lines from .claude/settings.local.json that contain the hard-coded API key and the most concerning permission entries, so you can inspect them directly.

Type: OpenClaw Skill Name: zhiliao Version: 1.0.0 The skill bundle is classified as suspicious due to the inclusion of a highly permissive `.claude/settings.local.json` file, which appears to be a leaked development configuration. This file grants broad permissions, including 'git push', 'npm install', and access to specific local file paths (e.g., `/Users/jinfeng/Documents/deeplang/**`), and contains a hardcoded API key (`sk_5f7d...`). While the core logic in the shell scripts (e.g., `create-topic.sh`, `fetch-articles.sh`) appears benign and aligned with the stated news aggregation purpose, the presence of these excessive permissions and sensitive artifacts represents a significant security risk and a lack of bundle sanitization.