Multisource Intel Radar

Build and run a high-signal information radar for C-end founders and operators across YouTube, X/Twitter, Reddit, WeChat Official Accounts, and Xiaohongshu....

Before installing or running: (1) Note that the code only implements OPML->feeds parsing and RSS/Atom fetching + scoring — WeChat/Xiaohongshu scraping and 'browser search' are described but not implemented; expect manual steps or additional tooling if you need those sources. (2) The SKILL.md default OPML path points to a personal home directory; check and sanitize your OPML (assets/feeds.txt) so you don't leak private feed URLs. (3) The scripts make outbound HTTP requests to up to 20 feeds (default) — review the feed list for unwanted domains and be mindful of rate limits and scraping legality for non-RSS platforms. (4) If you need automated XHS/WeChat ingestion, ask the author for details or a concrete, auditable implementation (including how credentials/session cookies are handled); avoid running opaque browser automation. (5) Run the scripts in a sandboxed environment first and inspect outputs (and feed URLs) before integrating into daily automation.

Type: OpenClaw Skill Name: multisource-intel-radar Version: 0.1.1 The skill is classified as suspicious due to its reliance on fetching content from arbitrary URLs specified in user-provided OPML files and the explicit instruction in `SKILL.md` for the AI agent to perform 'browser search' for certain sources (e.g., Xiaohongshu). While these capabilities are aligned with the stated purpose of building an 'information radar,' they represent significant attack surfaces. The `scripts/build_digest.py` script makes network requests to external URLs, and `scripts/parse_opml.py` processes user-supplied XML, both of which could be exploited if malicious input is provided, even though the scripts themselves do not exhibit malicious intent or direct exploitation.