News Daily Local

获取新闻热榜（国内、国际、科技、AI）并发送到飞书。不依赖本地工程，直接从 RSS 获取数据。

This skill appears to do what it says (aggregate RSS feeds and post to a Feishu webhook). Before installing: 1) Be aware the script disables SSL verification for all outbound requests — consider editing the script to remove that behavior (use default ssl context) to avoid MITM risk. 2) Only provide a webhook you control; the skill will post aggregated content to that webhook. 3) Review and, if needed, reduce the RSS feed list to only trusted sources. 4) Run the script in a restricted environment or sandbox if you are concerned about network exposure. 5) Note metadata has no homepage and an internal ownerId mismatch — not decisive but worth checking the publisher's trustworthiness. If you are comfortable fixing the SSL issue (or accepting the risk) and you trust the webhook destination, the skill is coherent with its stated purpose.

Type: OpenClaw Skill Name: news-daily-local Version: 1.0.0 The skill aggregates news from various RSS feeds and sends them to a Feishu/Lark webhook. It contains a security vulnerability in `scripts/fetch_and_send.py` where SSL certificate verification is explicitly disabled (`ssl.CERT_NONE`), which exposes the agent to Man-in-the-Middle (MitM) attacks when fetching news or communicating with the webhook. While the code logic is consistent with the stated purpose and no evidence of intentional malice or data exfiltration was found, the explicit bypass of security protocols requires a suspicious classification under the vulnerability guidelines.