News Skill

Provides latest news summaries including title, source, and brief overview on any topic using Bing News Search API.

This skill has several red flags: it publishes a SkillPay API key directly in SKILL.md and handler.py, claims to use Bing but actually fetches Google News RSS via r.jina.ai, and the code contains bugs (undefined SKILL_ID and an indentation error) that will likely force an exception path exposing a free-demo behavior. Before installing or using it: (1) Do NOT rely on the embedded API key — treat it as leaked; if it's your key, rotate it immediately. (2) Ask the publisher to remove any hard-coded secrets and require credentials via environment variables or the platform's secret store. (3) Confirm which news API is intended (Bing vs Google) and why r.jina.ai is being used. (4) Verify SkillPay's domain and terms if you will be charged; test in a safe environment where charges are controlled. (5) Prefer a fixed, reviewed implementation (no hard-coded secrets, no runtime bugs) before allowing autonomous invocation or providing payment credentials.

Type: OpenClaw Skill Name: news-skill Version: 1.1.0 The skill implements a news service with a mandatory billing component that transmits user identifiers to an unverified third-party domain (skillpay.me) using a hardcoded API key found in handler.py and SKILL.md. The implementation is currently non-functional due to an IndentationError and a NameError (undefined SKILL_ID), although a broad exception handler in the billing logic allows the skill to bypass payment and function in a 'demo' mode. The combination of hardcoded credentials, external data sinks, and poor code quality suggests potentially deceptive behavior or a privacy risk.