每日从古诗文网(gushiwen.cn)首页爬取诗词文句、古画名句等内容，整理后发送为消息。用于用户询问"每日古文"、"古诗"、"诗词推荐"或需要每日古文推荐时触发。

This skill is internally consistent for scraping and sending daily poetry from gushiwen.cn, but consider the following before installing: - Runtime requirements: SKILL.md expects to run curl (exec+curl). Ensure the agent runtime has curl or an equivalent HTTP fetcher and that executing shell commands is acceptable in your environment. - Network egress: The skill will make outbound HTTP requests to gushiwen.cn and to ziyuan.guwendao.net (for image URLs). If you run agents in a restricted network or care about data leaving your environment, review your egress rules or sandbox the skill. - Message delivery: The skill references a 'message' tool to send text and media. Confirm what messaging integration the agent will use (and whether that tool has access to other data) to avoid unintended data sharing. - Legal/terms: This is basic scraping of a third‑party site; verify that scraping the site is allowed by the site's terms of service and that you are comfortable with the content license. - Safety: Parsing HTML with regex is brittle; test the skill on a few days to ensure formatting and image extraction work and to avoid malformed outputs. If you want to be stricter, require the skill not run shell exec (or disable autonomous invocation) and instead provide a controlled HTTP client. If any of the above is unacceptable (shell execution, outbound requests, or automatic message posting), do not enable the skill or restrict its permissions/sandbox it first.

Type: OpenClaw Skill Name: daily-gushiwen Version: 1.0.0 The skill is classified as suspicious due to its explicit instruction in `SKILL.md` to use `exec+curl` for web scraping. While the current target (`https://www.gushiwen.cn/`) is legitimate and the stated purpose is benign, the `exec` capability allows for arbitrary shell command execution. This represents a significant vulnerability (potential for RCE) if the command or its parameters could be influenced by external input, even without clear evidence of intentional malicious behavior in this specific skill bundle.