zsxq-fetch-subscription

Use this skill when the user wants OpenClaw to query synced Zhishi Xingqiu content, inspect recent posts, search downloaded documents, summarize updates, or...

This skill is mostly coherent: it queries a local ZSXQ API using curl and builds answers from local data. Before installing, confirm two things: (1) whether you are comfortable allowing the agent to start a local server process — the SKILL.md suggests running `uvicorn app.main:app` from the project root, which will execute code from your filesystem and should be done only with explicit consent; (2) the author should declare `uvicorn` (or otherwise document how the server is started) in the required binaries or remove the instruction to start the server. If you don't want the agent to run processes on your host, either run the API server yourself beforehand or disable autonomous invocation / require explicit user permission for actions that start local processes. If possible, inspect the project code that would be run by uvicorn (app.main) to ensure it is trustworthy and that the local API endpoints do not expose sensitive data to the agent.

Type: OpenClaw Skill Name: zsxq-fetch-subscription Version: 1.0.0 The skill bundle provides instructions and metadata for an AI agent to interact with a local Zhishi Xingqiu (ZSXQ) data synchronization service. All network interactions are directed at a local API (127.0.0.1:8000) using standard curl commands as described in SKILL.md. While the documentation suggests binding the server to all interfaces (0.0.0.0), which is a minor security misconfiguration, there is no evidence of malicious intent, data exfiltration, or unauthorized execution.