← Back to Skills Marketplace
arsoooo

每日综合新闻(基于news-aggregator-skill并发送至飞书文档)

by arsoooo · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
81
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install news-aggregator-skill-news-daily
Description
每日综合新闻简报 - 自动抓取并生成包含科技、财经、热点的综合报告
Usage Guidance
Before installing or running this skill: 1) Ask the author to explain how Feishu document creation is authenticated (which env vars or tokens are required) and to add those variables to the skill metadata if needed. 2) Do not blindly export the hard-coded proxy (http://192.168.110.9:7890) — confirm whether that proxy is yours; routing traffic through an unknown proxy can expose your data. 3) Verify that the referenced directory (~/.openclaw/workspace/技能/news-aggregator-skill) exists and manually review the scripts/fetch_news.py files for unexpected behavior (network endpoints, data exfiltration, arbitrary command execution) before running. 4) If you want Feishu posting, prefer providing credentials via a secure secret store and expect the SKILL.md to declare required env vars (e.g., FEISHU_TOKEN). 5) If you cannot verify the above, consider running the skill in an isolated environment (air-gapped or VM) or decline until the developer clarifies the proxy and authentication details.
Capability Analysis
Type: OpenClaw Skill Name: news-aggregator-skill-news-daily Version: 1.0.0 The SKILL.md file contains instructions that force the AI agent to configure its environment with a hardcoded proxy server (192.168.110.9:7890). This is a significant security risk as it enables potential Man-in-the-Middle (MITM) attacks or traffic interception for all subsequent network requests made by the agent. Additionally, the skill references external scripts (scripts/fetch_news.py) that are not included in the bundle, making the actual data-fetching logic opaque and unverifiable.
Capability Assessment
Purpose & Capability
The name claims it will send reports to 飞书文档, but the SKILL.md only marks Feishu document creation as optional and provides no authentication or required environment variables for Feishu. The skill also depends on an external 'news-aggregator-skill' existing at a hard-coded workspace path — this reliance is not documented in registry metadata and may be missing on target systems.
Instruction Scope
Instructions tell the agent to cd into ~/.openclaw/workspace/技能/news-aggregator-skill and run local Python scripts (reads/writes JSON and report files). They also instruct exporting HTTP_PROXY/HTTPS_PROXY to a specific IP (http://192.168.110.9:7890). These steps reference local paths and network configuration outside the skill's declared requirements and could redirect traffic through an unexpected proxy.
Install Mechanism
No install spec and no bundled code — instruction-only. This minimizes install-time risk because nothing is downloaded or written by an install step.
Credentials
Registry metadata declares no required env vars or credentials, but SKILL.md asks the user to export proxy environment variables (hard-coded address) and implies optional Feishu integration without telling how to provide Feishu credentials. Absence of declared Feishu auth vars is a proportionality/information mismatch.
Persistence & Privilege
always is false and the skill does not request persistent/privileged presence or modify other skills. Autonomous invocation is allowed (platform default) but not combined with additional red flags that would raise privilege concerns.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install news-aggregator-skill-news-daily
  3. After installation, invoke the skill by name or use /news-aggregator-skill-news-daily
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
news-aggregator-skill-news-daily 1.0.0 - 首次发布:自动抓取和生成每日综合新闻简报 - 集成四大新闻板块:综合热门、科技简报、财经动态、热点追踪 - 支持多新闻源(Hacker News、微博、V2EX、GitHub Trending、Product Hunt 等) - 通过关键词触发,按板块整理新闻并输出为 markdown 格式 - 自动保存每日报告至本地目录
Metadata
Slug news-aggregator-skill-news-daily
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is 每日综合新闻(基于news-aggregator-skill并发送至飞书文档)?

每日综合新闻简报 - 自动抓取并生成包含科技、财经、热点的综合报告. It is an AI Agent Skill for Claude Code / OpenClaw, with 81 downloads so far.

How do I install 每日综合新闻(基于news-aggregator-skill并发送至飞书文档)?

Run "/install news-aggregator-skill-news-daily" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 每日综合新闻(基于news-aggregator-skill并发送至飞书文档) free?

Yes, 每日综合新闻(基于news-aggregator-skill并发送至飞书文档) is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 每日综合新闻(基于news-aggregator-skill并发送至飞书文档) support?

每日综合新闻(基于news-aggregator-skill并发送至飞书文档) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 每日综合新闻(基于news-aggregator-skill并发送至飞书文档)?

It is built and maintained by arsoooo (@arsoooo); the current version is v1.0.0.

💬 Comments