← Back to Skills Marketplace
278
Downloads
1
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install news-watcher
Description
Monitors CoinDesk or PANews for new crypto articles, summarizes them, and sends updates to Telegram without API keys or login.
Usage Guidance
This skill appears to do what it says: it scrapes configured sites, summarizes articles by calling your local OpenClaw agent, and sends messages to the Telegram chat ID you provide. Before installing or running it: (1) Verify OPENCLAW_MJS points to a legitimate OpenClaw installation you trust — the skill will execute that file. (2) Inspect scripts/watch-news.js yourself (it is included) to confirm it matches expectations. (3) Be aware OpenClaw (the target of OPENCLAW_MJS) will perform the actual Telegram sending and may have its own credentials; ensure those are configured securely and not exposing other recipients. (4) Run npm install (playwright) in a controlled environment and ensure you have the appropriate Node version and Chromium available. (5) If you want extra isolation, run the skill in an isolated user account or container so the cache and executed processes are separated from sensitive files. If you cannot verify OPENCLAW_MJS or the OpenClaw installation, do not set that environment variable or do not run the skill.
Capability Analysis
Type: OpenClaw Skill
Name: news-watcher
Version: 1.0.3
The skill monitors cryptocurrency news using Playwright and summarizes articles via an AI agent. It is classified as suspicious due to a significant vulnerability to indirect prompt injection in `scripts/watch-news.js`, where raw, untrusted web content is concatenated directly into an AI prompt. Additionally, the script utilizes `execFileSync` to execute a path defined by the `OPENCLAW_MJS` environment variable; while this is intended to call the OpenClaw core logic, it represents a risky execution pattern if the environment variable is manipulated.
Capability Assessment
Purpose & Capability
Name/description (monitor CoinDesk / PANews, summarize, send Telegram) aligns with required items: the script uses Playwright to fetch pages, computes hashes, calls a local OpenClaw agent (OPENCLAW_MJS) to summarize, and uses openclaw message send to deliver to TELEGRAM_USER_ID. No unrelated credentials or services are requested.
Instruction Scope
SKILL.md and scripts instruct the agent to launch Playwright, read/write a local cache (~/.openclaw/cache/news-hash.json), and invoke node OPENCLAW_MJS to run the OpenClaw agent and send Telegram messages. This is coherent with the skill, but the code executes the provided OPENCLAW_MJS (arbitrary local JS) via execFileSync — that means the skill will run whatever code is pointed to by OPENCLAW_MJS, so that path must point to a trusted OpenClaw installation.
Install Mechanism
There is no install spec in the registry (instruction-only skill), but package.json and README expect you to run npm install to get Playwright. No remote download URLs or extract steps embedded in the skill. Dependencies (playwright) are expected for browser automation; the 'crypto' dependency is unnecessary because Node provides crypto natively, but this is not a direct security issue.
Credentials
Required env vars are limited to OPENCLAW_MJS and TELEGRAM_USER_ID (plus optional CHROME_PATH and PLAYWRIGHT_HEADLESS). These map to the stated behavior. Caveat: giving the skill a path to OPENCLAW_MJS effectively grants it the ability to run that local script and any actions it performs (including sending messages using configured credentials). This is functionally necessary for the design but increases trust requirements around the provided openclaw.mjs.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and only writes to its own cache under the user's home (~/.openclaw/cache/news-hash.json). No elevated persistence or system-wide config changes are requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install news-watcher - After installation, invoke the skill by name or use
/news-watcher - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
**News Watcher 1.0.3 adds full-article scraping, AI summaries, and detailed environment setup instructions.**
- 新增自动抓取最新加密新闻文章全文并用 AI 生成中文摘要
- 推送摘要到 Telegram，需配置 OPENCLAW_MJS 和 TELEGRAM_USER_ID 环境变量
- 文档详细说明了环境依赖和各平台下的变量设置方法
- 补充开源仓库、运行截图和代码透明性说明
- 说明了检测逻辑和消息推送流程，便于集成到 OpenClaw Cron/Agent
v1.0.2
- 移除未使用的 execSync import，消除静态分析误报
- 更新描述：明确说明实时监听特性，附 GitHub 运行截图链接
- execFileSync 仅用于调用 OpenClaw AI Agent（非任意 shell 命令）
v1.0.1
- 更新 README.md 说明文档，内容更清晰完善
- 改善 SKILL.md 文档，增加安全透明说明
- 补充截图位置与验证指引
v1.0.0
【TRANSPARENT CODE REVIEW POLICY】This skill's code is fully open-source. All scripts are provided as references only. Before use, please review the code logic carefully and confirm there are no issues. Only after verification, rename reference scripts to executable extensions (e.g., .txt → .js) to run them.
【KEY FEATURES】
- Monitors CoinDesk & PANews for new crypto articles using Playwright
- Auto-detects, extracts full text, AI-summarizes via OpenClaw Agent
- Sends summaries to Telegram (no API keys or login required)
- Hash-based detection prevents false alerts from price fluctuations
- Customizable check intervals and site selection
【GITHUB REPOSITORY】
Full source code & documentation: https://github.com/vvxer/openclaw-news-watcher
View multiple screenshot examples in GitHub to verify the skill works perfectly.
Initial release 1.0.0
Metadata
Frequently Asked Questions
What is OpenClaw News Watcher?
Monitors CoinDesk or PANews for new crypto articles, summarizes them, and sends updates to Telegram without API keys or login. It is an AI Agent Skill for Claude Code / OpenClaw, with 278 downloads so far.
How do I install OpenClaw News Watcher?
Run "/install news-watcher" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw News Watcher free?
Yes, OpenClaw News Watcher is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw News Watcher support?
OpenClaw News Watcher is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw News Watcher?
It is built and maintained by vvxer (@vvxer); the current version is v1.0.3.
More Skills