← Back to Skills Marketplace
419
Downloads
0
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install news-daily
Description
获取新闻热榜（国内、国际、科技、AI）并发送到飞书。不依赖本地工程，直接从 RSS 获取数据。
Usage Guidance
This skill appears to do exactly what it claims: aggregate RSS feeds and post a formatted message to a Feishu webhook. Before installing, verify you trust the target Feishu webhook and the group it posts into (webhooks can receive any content the script sends). Inspect or modify the script to remove the insecure TLS behavior: it disables SSL certificate verification (ssl.CERT_NONE) — change to use the default SSL context to avoid MITM risk. If you enable automatic scheduling, be aware OpenClaw config changes will be applied; back up your OpenClaw config first. Run the script in a restricted environment if you are cautious, and keep the webhook URL secret (store in an environment variable rather than a checked-in config file).
Capability Analysis
Type: OpenClaw Skill
Name: news-daily
Version: 1.0.0
The skill fetches news from various RSS feeds and sends them to a user-configured Feishu webhook. However, the core script `scripts/fetch_and_send.py` explicitly disables SSL certificate verification (`ssl.CERT_NONE` and `check_hostname = False`), which is a significant security vulnerability that exposes the agent to Man-in-the-Middle (MITM) attacks. While the behavior aligns with the stated purpose and no intentional malicious logic (like data exfiltration) was found, this high-risk coding flaw meets the criteria for a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description, SKILL.md, README, and the Python script all consistently implement RSS aggregation and posting formatted cards to a Feishu webhook. Required env/config (NEWS_DAILY_WEBHOOK or scripts/config.json) aligns with that purpose; no unrelated services or credentials are requested.
Instruction Scope
Runtime instructions and code stay within expected scope (fetch RSS feeds from listed sources, format, and POST to a Feishu webhook). However, the bundled script explicitly disables SSL certificate verification (ssl_context.verify_mode = ssl.CERT_NONE), which weakens TLS and can allow MITM attacks when fetching feeds or posting to the webhook. The SKILL.md also instructs editing OpenClaw config to add hooks, which modifies system-level agent config (expected for scheduling but worth noting).
Install Mechanism
No install spec (instruction-only skill) and only lightweight files are included. The user is expected to copy the skill into the OpenClaw workspace; nothing is downloaded from arbitrary URLs or installed automatically.
Credentials
Only one sensitive runtime item is used: the Feishu webhook (via NEWS_DAILY_WEBHOOK or config.json). That is proportional to the stated purpose. The skill does not request unrelated credentials or other environment secrets.
Persistence & Privilege
always:false and user-invocable means normal privileges. The SKILL.md suggests enabling OpenClaw hooks/cron entries (which will change platform configuration to schedule the job) — this is expected for automated runs but is a system-level change the user should approve.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install news-daily - After installation, invoke the skill by name or use
/news-daily - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
news-daily 1.0.0
- 新增从多类新闻 RSS 源（国内、国际、科技、AI）获取新闻热榜的功能。
- 自动格式化新闻为飞书卡片消息并发送，支持标题点击访问原文。
- 支持通过环境变量或配置文件自定义 Webhook 和新闻类别数量。
- 提供定时自动推送和手动执行两种使用方式。
- 无需本地工程，直接通过 RSS 源抓取数据。
Metadata
Frequently Asked Questions
What is news-daily?
获取新闻热榜（国内、国际、科技、AI）并发送到飞书。不依赖本地工程，直接从 RSS 获取数据。 It is an AI Agent Skill for Claude Code / OpenClaw, with 419 downloads so far.
How do I install news-daily?
Run "/install news-daily" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is news-daily free?
Yes, news-daily is completely free (open-source). You can download, install and use it at no cost.
Which platforms does news-daily support?
news-daily is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created news-daily?
It is built and maintained by HeGangSZ (@hegangsz); the current version is v1.0.0.
More Skills