← 返回 Skills 市场
419
总下载
0
收藏
4
当前安装
1
版本数
在 OpenClaw 中安装
/install news-daily
功能描述
获取新闻热榜（国内、国际、科技、AI）并发送到飞书。不依赖本地工程，直接从 RSS 获取数据。
安全使用建议
This skill appears to do exactly what it claims: aggregate RSS feeds and post a formatted message to a Feishu webhook. Before installing, verify you trust the target Feishu webhook and the group it posts into (webhooks can receive any content the script sends). Inspect or modify the script to remove the insecure TLS behavior: it disables SSL certificate verification (ssl.CERT_NONE) — change to use the default SSL context to avoid MITM risk. If you enable automatic scheduling, be aware OpenClaw config changes will be applied; back up your OpenClaw config first. Run the script in a restricted environment if you are cautious, and keep the webhook URL secret (store in an environment variable rather than a checked-in config file).
功能分析
Type: OpenClaw Skill
Name: news-daily
Version: 1.0.0
The skill fetches news from various RSS feeds and sends them to a user-configured Feishu webhook. However, the core script `scripts/fetch_and_send.py` explicitly disables SSL certificate verification (`ssl.CERT_NONE` and `check_hostname = False`), which is a significant security vulnerability that exposes the agent to Man-in-the-Middle (MITM) attacks. While the behavior aligns with the stated purpose and no intentional malicious logic (like data exfiltration) was found, this high-risk coding flaw meets the criteria for a suspicious classification.
能力评估
Purpose & Capability
Name/description, SKILL.md, README, and the Python script all consistently implement RSS aggregation and posting formatted cards to a Feishu webhook. Required env/config (NEWS_DAILY_WEBHOOK or scripts/config.json) aligns with that purpose; no unrelated services or credentials are requested.
Instruction Scope
Runtime instructions and code stay within expected scope (fetch RSS feeds from listed sources, format, and POST to a Feishu webhook). However, the bundled script explicitly disables SSL certificate verification (ssl_context.verify_mode = ssl.CERT_NONE), which weakens TLS and can allow MITM attacks when fetching feeds or posting to the webhook. The SKILL.md also instructs editing OpenClaw config to add hooks, which modifies system-level agent config (expected for scheduling but worth noting).
Install Mechanism
No install spec (instruction-only skill) and only lightweight files are included. The user is expected to copy the skill into the OpenClaw workspace; nothing is downloaded from arbitrary URLs or installed automatically.
Credentials
Only one sensitive runtime item is used: the Feishu webhook (via NEWS_DAILY_WEBHOOK or config.json). That is proportional to the stated purpose. The skill does not request unrelated credentials or other environment secrets.
Persistence & Privilege
always:false and user-invocable means normal privileges. The SKILL.md suggests enabling OpenClaw hooks/cron entries (which will change platform configuration to schedule the job) — this is expected for automated runs but is a system-level change the user should approve.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install news-daily - 安装完成后，直接呼叫该 Skill 的名称或使用
/news-daily触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
news-daily 1.0.0
- 新增从多类新闻 RSS 源（国内、国际、科技、AI）获取新闻热榜的功能。
- 自动格式化新闻为飞书卡片消息并发送，支持标题点击访问原文。
- 支持通过环境变量或配置文件自定义 Webhook 和新闻类别数量。
- 提供定时自动推送和手动执行两种使用方式。
- 无需本地工程，直接通过 RSS 源抓取数据。
元数据
常见问题
news-daily 是什么？
获取新闻热榜（国内、国际、科技、AI）并发送到飞书。不依赖本地工程，直接从 RSS 获取数据。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 419 次。
如何安装 news-daily？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install news-daily」即可一键安装，无需额外配置。
news-daily 是免费的吗？
是的，news-daily 完全免费（开源免费），可自由下载、安装和使用。
news-daily 支持哪些平台？
news-daily 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 news-daily？
由 HeGangSZ（@hegangsz）开发并维护，当前版本 v1.0.0。
推荐 Skills