每日简报生成 skill。自动抓取 28 个来源的实时内容，生成 CEO 风格的深度分析简报。触发条件：用户请求"每日简报"、"科技新闻"、"AI 简报"。核心功能：RSS 抓取 → JSON 数据 → AI 生成 CEO 简报。

What to check before installing/running: 1) Inspect SKILL.md for hidden characters: the registry scan found unicode control characters in SKILL.md — open the file in a hex/Unicode‑aware editor and remove any unexpected control codes. Treat that as higher risk than normal typos. 2) Review the scripts locally before execution: the repo contains many scraping scripts that launch Playwright/Chromium and call external URLs. Ensure you understand which sites will be fetched and why. Running them will download and execute a headless browser. 3) Legal/ethical caution: the code intentionally applies anti‑bot evasion flags (e.g. '--disable-blink-features=AutomationControlled') and mentions '绕过 Cloudflare.' That can violate terms of service for some sites; confirm you have permission to scrape the listed sources. 4) Run in isolation: if you decide to try it, run the skill in a sandboxed environment (container or VM) so that network activity and the downloaded browser are contained. 5) Reduce blast radius: consider modifying profiles to limit sources or disable Playwright 'deep fetch' on sensitive sites. You can run fetchers with '--no-save' or steer the profile to only use APIs that return JSON. 6) Confirm no hidden exfil endpoints: while no suspicious remote endpoints were found in the provided files, you should audit any remaining truncated files in the repository and greps for suspicious domains or encoded strings. 7) If you lack time/skills: treat this skill as 'not ready for blind install' — ask the publisher for provenance (homepage, git URL, maintainer) or request a minimal version that only uses official APIs (no evasive Playwright scraping). If you want, I can: (a) give a short checklist and commands to safely review the repository locally, (b) scan the remaining omitted files for suspicious patterns, or (c) help sanitize SKILL.md to remove control characters.

Type: OpenClaw Skill Name: lorra-ceo-briefing Version: 1.0.3 The skill bundle is a legitimate and well-structured news aggregation tool designed to fetch, process, and summarize information from over 28 sources (RSS, GitHub, Weibo, etc.). It utilizes standard libraries like BeautifulSoup and Playwright for web scraping and integrates with LLM APIs (MiniMax and OpenRouter) for content synthesis. While the scripts access local environment variables for API keys and use subprocesses to modularize scraping tasks (e.g., in fetch_news.py and generate_ceo_briefing.py), these actions are transparently documented and strictly aligned with the stated purpose of generating 'CEO-style' briefings. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found.