← 返回 Skills 市场
275
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install get-news
功能描述
加密快讯抓取与筛选技能。使用当需要:(1) 从 BlockBeats 拉取快讯数据,(2) 按关键词筛选多条资讯,(3) 输出去 HTML 标签且时间已格式化的 JSON,用于后续自动化处理。
使用说明 (SKILL.md)
\r \r
Crypto News 快讯抓取技能\r
\r 从 BlockBeats 官方开放接口并发抓取最新快讯,支持按关键词筛选、数量控制,输出结构化 JSON,方便在 openclaw 流程里复用。\r \r
能力概览\r
\r
- 🔄 并发抓取:从
https://api.theblockbeats.news/v1/open-api/open-flash分页抓取最新快讯\r - 🔍 关键词筛选:对标题与内容做不区分大小写的关键词匹配(支持多个关键词)\r
- 🧹 内容清洗:自动移除
content等字段中的 HTML 标签,只保留纯文本\r - ⏱ 时间格式化:将
create_time等 Unix 秒时间戳转换为YYYY-MM-DD HH:mm:ss,并保留原始值\r - 📦 JSON 输出:只在 stdout 输出一个 JSON 数组,方便管道处理或被其他技能消费\r \r
快速开始\r
\r
运行环境:Node.js 18+(内置
fetch),在 workspace 根目录下执行。\r \r
1. 直接获取最新 N 条快讯(不按关键词过滤)\r
\r
node workspace/erbai/crypto-news/new.js "" 10 1000\r
```\r
\r
- 第 1 个参数 `""`:关键字为空,表示不过滤,直接返回最新快讯\r
- 第 2 个参数 `10`:`limit`,最多返回 10 条\r
- 第 3 个参数 `1000`:`maxLimit`,最多从接口抓取 1000 条后再截断\r
\r
返回结果为 JSON 数组,每一项是清洗和格式化后的快讯对象。\r
\r
### 2. 按关键词筛选(单个或多个)\r
\r
```bash\r
# 单个关键词\r
node workspace/erbai/crypto-news/new.js "btc" 20 1000\r
\r
# 多个关键词(逗号分隔)\r
node workspace/erbai/crypto-news/new.js "btc,okx,eth" 50 2000\r
```\r
\r
- 关键词不区分大小写,会在标题、内容等文本字段里做包含匹配\r
- 只返回最多 `limit` 条匹配结果\r
\r
## 参数说明\r
\r
脚本签名:\r
\r
```bash\r
node workspace/erbai/crypto-news/new.js {keyword} {limit} {maxLimit}\r
```\r
\r
- **`keyword`**(字符串,可选) \r
- 说明:关键字字符串,多个用英文逗号分隔,如 `"btc,okx,eth"` \r
- 行为:为空或省略时,不做关键词过滤,直接返回最新快讯 \r
\r
- **`limit`**(整数,可选,默认 `10`) \r
- 说明:最终返回的最大条数 \r
- 示例:`10` 表示最多返回 10 条快讯 \r
\r
- **`maxLimit`**(整数,可选,默认 `1000`) \r
- 说明:从接口抓取的最大原始条数,上限控制抓取 & 计算量 \r
- 示例:`2000` 表示最多抓 2000 条,再在其中进行筛选和截断 \r
\r
## 输出数据结构(示例)\r
\r
```jsonc\r
[\r
{\r
"id": 335678,\r
"title": "OKX Star:有些公司打造产品,有些公司组织诉讼",\r
"content": "BlockBeats 消息,3 月 11 日,OKX 创始人兼 CEO Star ...", // 已去 HTML 标签\r
"link": "https://m.theblockbeats.info/flash/335678",\r
"create_time": "2026-03-13 16:28:32", // 已格式化\r
"create_time_raw": "1773376185" // 原始 Unix 秒时间戳\r
}\r
]\r
```\r
\r
> 注意:字段名会随官方 API 变动而略有不同,技能保证: \r
> - 文本字段中的 HTML 标签会被移除 \r
> - `create_time` / `time` / `timestamp` 等时间戳字段会尝试格式化并保留 `_raw` 原值 \r
\r
## 在 openclaw 中的典型用法\r
\r
- **作为数据源技能**:在自动化流程里先调用本技能获取结构化快讯列表,再交给其他技能(例如摘要、翻译、推送等)继续处理。\r
- **与通知/推送技能组合**: \r
1. 使用 `crypto-news` 获取匹配某些币种的最新快讯 \r
2. 将结果过滤重组后,推送到钉钉/飞书/Telegram 等渠道 \r
\r
调用本技能时,只需要让代理执行对应的 `node ...` 命令,并把 stdout 解析为 JSON 即可。
安全使用建议
This skill's new.js matches the advertised purpose and is safe to inspect/run for fetching/formatting BlockBeats news. However: (1) review push-news.js and send-feishu.js before running — they contain a hard-coded local gateway URL and bearer token that will POST messages to http://127.0.0.1:18789 and could interact with your local OpenClaw gateway or similar service; (2) if you only want the fetcher, run new.js directly and ignore/remove the push scripts; (3) prefer replacing embedded tokens with environment variables or removing them entirely if you don't intend to use the push feature; (4) check .sent-news.json (the script will write/update it) and back it up if needed; (5) consider removing the included node_modules or auditing dependencies (ws) if you have strict supply-chain policies. If you want a firmer classification (benign vs malicious), provide the intended deployment environment for the gateway endpoint and whether the embedded token is known/trusted.
功能分析
Type: OpenClaw Skill
Name: get-news
Version: 1.0.0
The skill bundle is designed to scrape cryptocurrency news from the BlockBeats API and forward it to a local gateway for notification. It is classified as suspicious due to the inclusion of a hardcoded authentication token (GATEWAY_TOKEN) and specific Feishu target IDs in push-news.js and send-feishu.js, which represent a significant security vulnerability and credential leak risk. Additionally, push-news.js utilizes execSync to execute local scripts (new.js), which is a high-risk pattern for potential command injection if arguments are not strictly sanitized.
能力评估
Purpose & Capability
The core new.js fetcher matches the skill description (pulls from BlockBeats, filters keywords, strips HTML, formats timestamps, prints JSON). However the package also includes push-news.js and send-feishu.js which implement automatic push to a local Gateway (Feishu) using embedded credentials; that extends the skill beyond a pure data-source and may be surprising to users.
Instruction Scope
The SKILL.md instructs only running new.js to produce JSON, but the repository contains additional runtime scripts (push-news.js, send-feishu.js) that the README does not explicitly advertise as present or dangerous. Those scripts call new.js via child_process.execSync, send HTTP requests to http://127.0.0.1:18789, and write/modify .sent-news.json — side effects that are not described in the usage instructions and could run if a user invokes the push scripts.
Install Mechanism
There is no install spec (instruction-only style). All files are included in the skill bundle; no external download/install actions occur during installation. The bundle contains a standard ws dependency in node_modules, which is unnecessary for the fetch-only script but not itself hostile.
Credentials
The skill declares no required environment variables, but push-news.js and send-feishu.js embed a bearer token (GATEWAY_TOKEN) and fixed gateway URL (http://127.0.0.1:18789) and account/target identifiers. Hard-coded credentials in distributed code are sensitive and disproportionate: they grant access to a local gateway API and should not be assumed safe. Ideally such tokens are provided by the user via environment/config.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It creates and updates a local cache file (.sent-news.json) in its directory to track sent items, which is expected behavior for a push script.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install get-news - 安装完成后,直接呼叫该 Skill 的名称或使用
/get-news触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
加密快讯抓取与筛选技能。使用当需要:(1) 从 BlockBeats 拉取快讯数据,(2) 按关键词筛选多条资讯,(3) 输出去 HTML 标签且时间已格式化的 JSON,用于后续自动化处理。
元数据
常见问题
leesen86-news 是什么?
加密快讯抓取与筛选技能。使用当需要:(1) 从 BlockBeats 拉取快讯数据,(2) 按关键词筛选多条资讯,(3) 输出去 HTML 标签且时间已格式化的 JSON,用于后续自动化处理。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 275 次。
如何安装 leesen86-news?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install get-news」即可一键安装,无需额外配置。
leesen86-news 是免费的吗?
是的,leesen86-news 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
leesen86-news 支持哪些平台?
leesen86-news 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 leesen86-news?
由 leesen86(@leesen86)开发并维护,当前版本 v1.0.0。
推荐 Skills