← 返回 Skills 市场

Kiro Creator Monitor Daily Brief

Name: Kiro Creator Monitor Daily Brief
Author: vmining

作者 Xinjin · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

534

总下载

当前安装

版本数

在 OpenClaw 中安装

/install kiro-creator-monitor-daily-brief

功能描述

Monitor creator topics across X, RSS, GitHub, and Reddit; deduplicate and score results; produce a daily top-5 brief plus one publish-ready X/LinkedIn draft;...

使用说明 (SKILL.md)

Kiro Creator Monitor Daily Brief

Plugin producer: kiroai.io

This skill builds a creator-focused monitoring loop:

Pull signals from configured sources (x, rss, github, reddit)
Deduplicate and score by relevance + freshness
Output a concise brief: top 5 items + one social draft
Optionally deliver to Telegram/Slack/email

Files

scripts/daily_brief.py
examples/config.json
examples/cron_command.txt

Quick start

python3 skills/kiro-creator-monitor-daily-brief/scripts/install_and_init.py

python3 skills/kiro-creator-monitor-daily-brief/scripts/daily_brief.py \
  --config skills/kiro-creator-monitor-daily-brief/examples/config.json \
  --out-dir outputs/creator-brief

Config

Use JSON config with:

topics: keyword groups and exclusions
sources: source-level settings
delivery: optional delivery channels

See examples/config.json.

Schedule

For OpenClaw cron, use the command in examples/cron_command.txt and set your schedule to:

0 9 * * * with timezone America/New_York

Notes

X search needs X_BEARER_TOKEN.
RSS and public GitHub endpoints can run without keys.
Reddit public JSON may be rate-limited; set a user-agent in script args if needed.

安全使用建议

This skill appears to do what it says: gather signals and optionally post a daily brief. However, the registry metadata incorrectly marks delivery credentials (Telegram token, Slack webhook, SMTP user/pass) as required even though delivery is optional in the code and examples. Before installing: (1) do not populate or expose broad secrets unless you intend to enable that delivery channel; prefer creating channel-specific tokens with minimal scope; (2) inspect the full daily_brief.py (especially the delivery functions) to confirm endpoints are only official Telegram/Slack/email and that no unexpected hosts are contacted; (3) run the script in a controlled environment (or with delivery disabled) to validate behavior; (4) if you already provided credentials and want to be cautious, rotate those credentials after testing. The metadata inconsistency is not proof of malicious intent, but it is a red flag you should resolve before trusting persistent secrets to the skill.

功能分析

Type: OpenClaw Skill Name: kiro-creator-monitor-daily-brief Version: 1.0.0 The skill is designed to monitor creator topics and deliver daily briefs, which necessitates reading sensitive environment variables (e.g., X_BEARER_TOKEN, TELEGRAM_BOT_TOKEN, SMTP_PASS) and making network requests to external APIs (X, Telegram, Slack) and an SMTP server. All such actions are directly aligned with the stated purpose of the skill. The code in `scripts/daily_brief.py` uses standard libraries for HTTP requests and email, and handles credentials securely via environment variables. The `SKILL.md` and `agents/openai.yaml` files contain benign instructions for the agent, without any evidence of prompt injection or malicious intent. No obfuscation, unauthorized data exfiltration, or persistence mechanisms were found.

能力评估

✓ Purpose & Capability

Name/description (monitor X/RSS/GitHub/Reddit and optionally deliver via Telegram/Slack/email) align with the included Python scripts and example config. Required binary (python3) and primary credential (X_BEARER_TOKEN) are reasonable for the stated purpose.

✓ Instruction Scope

SKILL.md instructs running the included scripts with a JSON config and optionally delivering results. The instructions and code only access the listed APIs/endpoints (api.x.com, api.github.com, reddit, RSS feeds) and optional delivery endpoints; there are no instructions to read unrelated system files or send data to unknown hosts.

✓ Install Mechanism

There is no install spec that downloads/executes third-party binaries or archives. The skill is instruction-plus-scripts only, so nothing is fetched from arbitrary URLs during install.

⚠ Credentials

Registry metadata lists many required environment variables (TELEGRAM_BOT_TOKEN, SMTP_PASS, SLACK_WEBHOOK_URL, etc.) despite the SKILL.md and examples showing delivery channels are optional and disabled by default. The install helper even marks these as OPTIONAL_ENVS. Declaring all secrets as required in metadata is disproportionate and inconsistent with the code.

✓ Persistence & Privilege

The skill does not request always:true and does not modify other skills or system-wide settings. install_and_init writes config/template files to a user-scoped workspace path, which is expected behavior.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install kiro-creator-monitor-daily-brief
安装完成后，直接呼叫该 Skill 的名称或使用 /kiro-creator-monitor-daily-brief 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

1.1.0： - Added support for persistent user-added sources using user_sources.json. - Introduced fixed_sources.json for managing fixed index sources. - Updated documentation to clarify runtime source merge order: config base, fixed, then user-added. - Added example command for adding a new source via CLI. - Refined required environment variables in metadata; channel-specific credentials are now optional.

v1.0.0

Kiro Creator Monitor Daily Brief v1.0.0 - Initial release. - Monitors specified topics across X, RSS, GitHub, and Reddit. - Deduplicates and scores results by relevance and freshness. - Generates a daily top-5 brief plus one publish-ready X/LinkedIn social draft. - Supports scheduled delivery to Telegram, Slack, or email. - Includes setup instructions and example configs for quick start.

元数据

Slug kiro-creator-monitor-daily-brief

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题