采集 AI 新闻，校验 stage1 JSON，发布 KeplerJAI 简讯，并以可迁移、面向 agent workspace 的方式生成最终摘要。

What to check before installing: - The SKILL.md and scripts expect API credentials (KEPLERAI_API_KEY or KEPLERJAI_BEARER_TOKEN and optional cookies) but the registry metadata lists no required env vars — ask the publisher to declare these explicitly so you know what secrets will be read. - Inspect publish_bulletins.py and confirm you trust the endpoint https://www.keplerjai.com (this skill will POST content there). If you don't trust that domain, do not provide credentials and do not run the publish step. - Note the presence of scripts/run_saved_pipeline.py which will try to locate and run a local openclaw executable (i.e., spawn a nested agent). SKILL.md says that script is for manual debugging only — ensure any automated scheduling or learning does not execute this script, otherwise you may get nested agent runs that violate the intended single-layer workflow. - Be cautious about the '--insecure' option in publish_bulletins.py (it disables SSL verification). Avoid using it in production. - Confirm where outputs will be written on your machine: the scripts derive a workspace path relative to the skill location and may create files like pipeline.log, final-message.txt, publish-result.json, and stage1 JSON. If you have multiple agent workspaces, verify the target to avoid writing into an unintended directory. - If you plan to schedule or allow implicit invocation, consider restricting the skill or ensuring the environment does not contain high-privilege credentials you don't want the skill to access. What would change this assessment: - If the registry metadata is updated to declare the expected environment variables and explain the intended usage of run_saved_pipeline.py (explicitly marking it as manual-only), and if the publisher documents and justifies the keplerjai.com endpoint, the remaining concerns become minor and this would likely be 'benign'. - If additional unexpected credential names, hardcoded remote download URLs, or obfuscated network endpoints were found, the verdict would be more severe.

Type: OpenClaw Skill Name: keplerjai-bulletin-publish Version: 1.0.0 The skill implements an automated AI news collection and publishing workflow for the KeplerJAI platform. It utilizes high-risk capabilities including network access for web scraping (newsnow.co.uk) and API interaction (keplerjai.com), filesystem operations for logging and data persistence, and the execution of sub-processes via `subprocess.run` in `scripts/run_saved_pipeline.py`. The skill handles sensitive authentication tokens (e.g., `KEPLERAI_API_KEY`) and includes an optional `--insecure` flag in `scripts/publish_bulletins.py` to bypass SSL verification. While these behaviors are aligned with the stated purpose and the scripts include security-conscious logic like log sanitization to mask secrets, the combination of shell execution, network access, and credential handling meets the threshold for a suspicious classification.