招标监控：自动抓取招投标网站，按关键词过滤新项目，飞书/Telegram推送。 支持智能化/EPC总承包/中标公告，可独立配置关键词、数据源、推送目标。

What to check before installing: - Inspect and edit config.json: change push.target, webhook_url, app_id and app_secret only if you trust the receiving endpoint. Do NOT put sensitive credentials into a shared or world-readable directory. - Prefer storing secrets (app_id/app_secret) in a secure secret store or environment variables rather than in config.json if possible; the current implementation expects them in the config file. - The script will fetch the URLs listed in config.json and send scraped titles/contents to the configured push targets — verify every source and every destination (webhook/Feishu) are trustworthy to avoid accidental data exfiltration. - The script creates a local data directory (history.json, monitor.log). If you run this on a multi-user system, ensure file permissions are appropriate. - There is no automatic installer; you must provide Python and pip-install requests and beautifulsoup4. Review the full monitor.py (especially the truncated portion if any) before running and consider running it in an isolated environment (container/VM) if you are concerned about network or filesystem access. - If you want stricter controls, disable autonomous invocation on the agent or review scheduling requests before allowing periodic runs.

Type: OpenClaw Skill Name: bid-monitor Version: 1.0.0 The 'bid-monitor' skill is a legitimate tool designed to scrape and filter public bidding announcements from various Chinese procurement portals (e.g., Xuzhou Public Resource Trading Center). The Python script (`monitor.py`) uses standard libraries like 'requests' and 'BeautifulSoup' to fetch data and perform keyword-based scoring as defined in 'config.json'. Notifications are sent via Feishu or Webhooks as described in 'SKILL.md', and the code contains no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.