News Aggregator Skill

Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 8 major sources: Hacker News, GitHub Trending, Product Hunt, 36Kr, Tencent News, WallStreetCN, V2EX, and Weibo. Best for 'daily scans', 'tech news briefings', 'finance updates', and 'deep interpretations' of hot topics.

Review this before installing if your agent runs inside a private network or has access to sensitive files, credentials, or internal services. Use it only in a constrained environment, avoid deep-fetch mode for untrusted sources, pin dependencies, and treat fetched article text and generated reports as untrusted content.

Type: OpenClaw Skill Name: news-aggregator-skill Version: 0.1.0 The skill is classified as suspicious primarily due to prompt injection instructions found in `SKILL.md`. Specifically, the 'Smart Keyword Expansion' section explicitly instructs the AI agent to automatically expand and modify the user's input keywords (e.g., 'AI' -> 'AI,LLM,GPT,...') before executing the `fetch_news.py` script. While the stated intent is to broaden search results, this constitutes an instruction for the agent to override or augment user input, which is a form of prompt manipulation. Additionally, the `scripts/fetch_news.py` performs extensive web scraping, including fetching content from arbitrary article URLs if the `--deep` flag is used, which is a high-risk capability, though it appears to be aligned with the skill's stated purpose and lacks direct malicious indicators like exfiltration or arbitrary code execution.