← 返回 Skills 市场

ClawFeed 新闻推送

Name: ClawFeed 新闻推送
Author: goofyfht-blip

作者 goofyfht-blip · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

236

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clawfeed-push

功能描述

ClawFeed 新闻摘要飞书推送。定时抓取全球新闻（BBC · CNBC · Reuters · Al Jazeera）→ AI 生成中文摘要 → 推送至飞书。触发条件：(1) 用户要求推送新闻 (2) 测试推送 (3) 配置定时任务

使用说明 (SKILL.md)

ClawFeed Push - 新闻摘要飞书推送

定时抓取全球新闻 → AI 生成中文摘要 → 推送至飞书对话。

功能

自动抓取 BBC World、Al Jazeera、CNBC、Reuters 等主流媒体 RSS
基于 MiniMax AI 生成中文新闻摘要
每日定时推送 50 条新闻到飞书
支持手动触发推送测试

配置

1. 飞书用户 ID

默认推送到当前飞书对话（user:ou_30597b1b45c505faac65f11983d1276d），如需修改目标，编辑 scripts/push-feishu.py 中的 TARGET 变量。

2. Crontab 定时推送

脚本已在 crontab 中注册：

30 8 * * 1-5  /home/goofy/.openclaw/workspace/scripts/clawfeed-daily.sh

每周一至周五 8:30 自动执行。

手动命令

# 生成当日摘要（不推送）
python3 ~/.openclaw/workspace/scripts/clawfeed-digest.py daily zh

# 仅推送最新摘要到飞书
python3 ~/.openclaw/workspace/scripts/clawfeed-push-feishu.py

# 生成 + 推送（完整流程）
bash ~/.openclaw/workspace/scripts/clawfeed-daily.sh

依赖

Python 3
openclaw CLI（已安装）
ClawFeed 服务运行于 localhost:8767
MiniMax API Key

新闻源

BBC World News · Al Jazeera English · CNBC Top News · Reuters Business

共约 50-80 条原始新闻，AI 摘要后保留 50 条。

安全使用建议

Do not install or run this skill without manual verification. Ask the author for: (1) exact list of required credentials (MiniMax API key and Feishu token/webhook) and where they are expected to be stored; (2) the source code for the scripts referenced (~/.openclaw/workspace/scripts/*) and confirmation that the crontab entry is legitimate. Before running, inspect the scripts and crontab yourself to confirm the push target (change the hardcoded Feishu ID), ensure the MiniMax key and any Feishu credentials are provided securely (not accidentally in plaintext files), and verify the local ClawFeed service and openclaw CLI are from trusted sources. If you cannot review the scripts, do not enable scheduled pushes — run things manually under controlled conditions first.

功能分析

Type: OpenClaw Skill Name: clawfeed-push Version: 1.0.0 The skill bundle references several external scripts (clawfeed-daily.sh, clawfeed-digest.py, clawfeed-push-feishu.py) and a crontab persistence mechanism that are not included in the provided files, preventing a full security audit of the execution logic. It also contains hardcoded environment-specific paths (/home/goofy/) and a specific Feishu user ID (ou_30597b1b45c505faac65f11983d1276d), which are risky practices for shared skills. While the stated intent is news aggregation, the combination of shell execution and automated persistence without the underlying code is a significant security risk.

能力评估

⚠ Purpose & Capability

The declared purpose is reasonable (fetch news → summarize → push to Feishu), but the SKILL.md references resources not declared in the registry metadata: a MiniMax API key, a running ClawFeed service on localhost:8767, and an existing openclaw CLI installation. The skill metadata lists no required env vars or credentials, yet the instructions require at least an AI API key and Feishu access — this mismatch is disproportionate and incoherent.

⚠ Instruction Scope

The runtime instructions reference specific files and paths in the user's home (~/.openclaw/workspace/scripts/...), show a crontab entry already registered, and instruct executing local scripts. They also note a default hardcoded Feishu target ID (user:ou_30597b1b45c505faac65f11983d1276d) which could cause messages to be sent to an unexpected recipient. The instructions assume existence of local services and files that are not bundled or installed by the skill and do not specify how secrets are provided or stored.

✓ Install Mechanism

There is no install spec (instruction-only), which is the lowest installer risk. However the SKILL.md presumes pre-existing installed components (openclaw CLI, local ClawFeed service) and scheduled tasks, which the registry does not manage or verify.

⚠ Credentials

The SKILL.md explicitly mentions a 'MiniMax API Key' and requires pushing to Feishu (which normally needs a webhook/token or SDK credentials), yet the registry lists no required env vars or primary credential. That omission is a red flag: the skill needs secrets but does not declare them, and the method/location for storing/reading those secrets is unspecified.

ℹ Persistence & Privilege

always:false (good). But the instructions reference an existing crontab entry and scripts in ~/.openclaw/workspace, implying persistent scheduled behavior outside the skill bundle. The skill itself does not request system-wide privileges in metadata, but the documented behavior (periodic pushes) depends on previously installed scheduled tasks — confirm who set those up and what they do.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clawfeed-push
安装完成后，直接呼叫该 Skill 的名称或使用 /clawfeed-push 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

首次发布

元数据

Slug clawfeed-push

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题