每日市场洞察报告生成系统。使用多Agent协作：新闻采集→分析→市场趋势预测→飞书文档报告。每天10:00自动运行。

Before installing, get answers to these questions: 1) Where does 'opencode sisyphus' come from? Confirm whether 'opencode' is a platform-provided tool or a third‑party CLI; ask for its homepage/source and an install spec. Running unknown CLIs can execute arbitrary code. 2) Will the agent have Feishu credentials? The skill will create docs and post messages to a Feishu group; ensure you understand which account/group will be used and that credentials/permissions are appropriate. 3) The SKILL.md instructs creating a git repo and writing files under ~/.openclaw/workspace/… — confirm you’re comfortable with the skill creating persistent files there (and review what data will be stored). 4) Ask the publisher for a homepage or source repository and for an install manifest that declares required binaries and any required environment variables. 5) If you want to test, run it in a sandboxed account/environment with limited Feishu permissions and inspect the files it creates. Because the instructions include running an external CLI and persisting data, treat this as potentially risky until the missing details are provided.

Type: OpenClaw Skill Name: daily-market-insight Version: 1.0.0 The 'daily-market-insight' skill aims to generate and distribute market reports, which is a benign purpose. However, the SKILL.md file contains a direct instruction for the AI agent to execute a shell command (`git init`). While `git init` itself is not malicious and appears to be a setup step for the `opencode` command, this demonstrates a significant vulnerability where the agent can be instructed to execute arbitrary shell commands via markdown. This capability, if exploited, could lead to remote code execution, making the skill bundle suspicious due to the inherent risk, despite the lack of explicit malicious intent in the provided command.