每日综合新闻（基于news-aggregator-skill并发送至飞书文档）

每日综合新闻简报 - 自动抓取并生成包含科技、财经、热点的综合报告

Before installing or running this skill: 1) Ask the author to explain how Feishu document creation is authenticated (which env vars or tokens are required) and to add those variables to the skill metadata if needed. 2) Do not blindly export the hard-coded proxy (http://192.168.110.9:7890) — confirm whether that proxy is yours; routing traffic through an unknown proxy can expose your data. 3) Verify that the referenced directory (~/.openclaw/workspace/技能/news-aggregator-skill) exists and manually review the scripts/fetch_news.py files for unexpected behavior (network endpoints, data exfiltration, arbitrary command execution) before running. 4) If you want Feishu posting, prefer providing credentials via a secure secret store and expect the SKILL.md to declare required env vars (e.g., FEISHU_TOKEN). 5) If you cannot verify the above, consider running the skill in an isolated environment (air-gapped or VM) or decline until the developer clarifies the proxy and authentication details.

Type: OpenClaw Skill Name: news-aggregator-skill-news-daily Version: 1.0.0 The SKILL.md file contains instructions that force the AI agent to configure its environment with a hardcoded proxy server (192.168.110.9:7890). This is a significant security risk as it enables potential Man-in-the-Middle (MITM) attacks or traffic interception for all subsequent network requests made by the agent. Additionally, the skill references external scripts (scripts/fetch_news.py) that are not included in the bundle, making the actual data-fetching logic opaque and unverifiable.