← 返回 Skills 市场

ai news weekly agent

Name: ai news weekly agent
Author: matilda-grifin

作者 Matilda-Grifin · GitHub ↗ · v1.0.2 · MIT-0

cross-platform ⚠ suspicious

127

总下载

当前安装

版本数

在 OpenClaw 中安装

/install ai-news-weekly-agent

功能描述

Generate a weekly AI report with OpenClaw top skills, official announcements, industry news, and capped paper ratio in Markdown format.

使用说明 (SKILL.md)

AI News Weekly Agent

Generate a weekly AI report in Markdown, including OpenClaw top skills, official announcements, industry news, and capped paper ratio.

When to use

User asks for weekly AI digest/report
User wants OpenClaw skills ranking + AI news summary

Command

python3 run_daily_digest.py --use-llm --llm-provider auto --window-hours 168 --max-paper-ratio 0.2 --min-official-items 3

Required environment variables

Ark mode:
- ARK_API_KEY
- ARK_MODEL
- ARK_ENDPOINT_ID (recommended, ep-xxx)
OpenAI-compatible mode:
- OPENAI_API_KEY
- OPENAI_BASE_URL (if ends with /v1, script auto-expands to /chat/completions)
- OPENAI_MODEL (optional, but recommended)

Notes:

In OpenClaw, these variables may be injected by the runtime.
If not injected, users must provide them manually in runtime env or local .env.
--llm-provider auto prefers Ark when Ark vars exist; otherwise uses OpenAI-compatible mode.
Default security policy requires HTTPS endpoint and allowlisted LLM hosts.

Optional environment variables

DIGEST_WEBHOOK_URL: webhook for send notifications when using --send

Environment template

Use runtime env injection in OpenClaw, or copy this template to local .env:

ARK_API_KEY=
ARK_MODEL=Doubao-Seed-1.6-lite
ARK_ENDPOINT_ID=
OPENAI_API_KEY=
OPENAI_BASE_URL=
OPENAI_MODEL=
DIGEST_WEBHOOK_URL=

External network access

This skill may access these external endpoints during execution:

https://ark.cn-beijing.volces.com (Ark LLM API)
OPENAI_BASE_URL target (OpenAI-compatible provider endpoint)
https://topclawhubskills.com (OpenClaw leaderboard snapshot)
RSS/news URLs listed in sources.json
Optional webhook hosts for notification: Feishu/Lark or DingTalk

Security and data handling

No API keys are hardcoded in repository files.
.env is not tracked and should never be committed.
Only report-generation inputs are sent to LLM when --use-llm is enabled.
Users should review and trust the configured endpoints before running.
SSL verification is enabled by default. Insecure SSL fallback requires explicit --allow-insecure-ssl.
Custom LLM endpoint hosts are blocked by default unless --allow-custom-llm-endpoint is provided.
Optional extension: set LLM_ALLOWED_HOSTS (comma-separated) to add trusted hosts.
Webhook only supports HTTPS and official Feishu/Lark/DingTalk domains.

Publishing note

For ClawHub publish, confirm the MIT-0 license checkbox in the web UI.

安全使用建议

This skill looks like a legitimate weekly AI digest generator, but check these before installing or running: 1) The registry says no env vars, but the script needs LLM credentials (ARK_* or OPENAI_*). Don’t paste keys into the repo; set them only in a trusted runtime or local .env you control. 2) Inspect sources.json for any feeds you don't trust and consider removing unknown RSS URLs. 3) If you enable LLM usage, confirm OPENAI_BASE_URL or Ark endpoint is a provider you trust and set LLM_ALLOWED_HOSTS to restrict endpoints. 4) If you enable notifications, only set DIGEST_WEBHOOK_URL to an endpoint you control and trust (the script limits webhook suffixes, but verify the full host). 5) If you want to avoid sending fetched content to an external LLM, run without --use-llm or run locally offline. 6) Ask the publisher to correct the registry metadata (declare required env vars) before using in a shared/runtime environment. Running the script in an isolated environment and reviewing run_daily_digest.py yourself is recommended.

功能分析

Type: OpenClaw Skill Name: ai-news-weekly-agent Version: 1.0.2 The skill bundle is a legitimate AI news aggregation tool that fetches RSS feeds, scrapes the OpenClaw leaderboard, and generates summarized reports using LLMs. The code in 'run_daily_digest.py' includes several proactive security features, such as HTTPS enforcement, an allowlist for LLM endpoints (e.g., Ark, OpenAI), and domain restrictions for webhooks (limited to Feishu, Lark, and DingTalk). No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the script's capabilities are well-aligned with its stated purpose of generating weekly AI digests.

能力评估

ℹ Purpose & Capability

Name/description match the code and SKILL.md: the script aggregates RSS feeds, scrapes an OpenClaw leaderboard, and optionally calls an LLM to generate text. However registry metadata lists no required environment variables while SKILL.md and the script clearly expect LLM credentials (ARK_* or OPENAI_*), and an optional webhook URL. That mismatch between declared requirements and runtime instructions is unexpected and should be resolved.

ℹ Instruction Scope

SKILL.md gives a concrete command to run the included Python script. The runtime instructions stay within the stated purpose (fetch RSS, scrape topclawhubskills.com, optionally call LLM, optionally post to a webhook). They explicitly mention enforced HTTPS, allowed LLM hosts, and webhook domain suffix checks. Be aware the script will fetch external URLs from sources.json and will send generated/prompts to whichever LLM endpoint you configure, so review endpoints and sources beforehand.

✓ Install Mechanism

No install spec is provided (instruction-only skill plus bundled Python file). There are no downloads or archive extractions in the manifest. The included code runs as a local script and uses standard library networking — no package registry installs or remote code pulls during install.

⚠ Credentials

The environment variables the SKILL.md requires (ARK_API_KEY, ARK_MODEL, ARK_ENDPOINT_ID or OPENAI_API_KEY, OPENAI_BASE_URL, OPENAI_MODEL, and optional DIGEST_WEBHOOK_URL) are appropriate for an LLM-backed report generator. The concern is the registry metadata claims 'Required env vars: none' which understates the actual runtime secrets the script may use. This inconsistency could cause users to unknowingly provide credentials. Also note that providing a webhook (DIGEST_WEBHOOK_URL) will transmit generated output to an external endpoint — the script restricts webhook hosts to certain suffixes but you should still verify the destination.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide configs, and has no install step that persists binaries into system paths. It writes generated reports to a local daily_docs/ directory but otherwise has normal, limited persistence behavior for a reporting script.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install ai-news-weekly-agent
安装完成后，直接呼叫该 Skill 的名称或使用 /ai-news-weekly-agent 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.2

Security policy improvements and stricter endpoint controls: - Clarified: Default security policy requires HTTPS endpoints and allowlisted LLM hosts. - Added: SSL verification now enabled by default; insecure connection fallback requires explicit flag. - Added: Custom LLM endpoints are blocked unless explicitly allowed with `--allow-custom-llm-endpoint`. - Added: `LLM_ALLOWED_HOSTS` environment variable to extend trusted LLM hosts. - Noted: Webhook notifications are now restricted to HTTPS and official Feishu/Lark/DingTalk domains.

v1.0.1

Initial release with environment configuration and documentation enhancements. - Added support for both Ark and OpenAI-compatible LLM providers via environment variables. - Updated the startup command to include `--llm-provider auto` for automatic provider selection. - Added documentation outlining required and optional environment variables in SKILL.md. - Included security, data handling, and external access details in the documentation. - Provided `.env.example` and updated `.gitignore` for environment variable management.

v1.0.0

AI News Weekly Agent 1.0.0 – Initial Release - Generates a weekly AI report in Markdown format. - Includes OpenClaw top skills, official announcements, industry news, and research paper ratio cap. - Designed for user requests about weekly AI digests or OpenClaw skills rankings with news. - Provides a simple command line interface for report generation.

元数据

Slug ai-news-weekly-agent

版本 1.0.2

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 3

常见问题