← 返回 Skills 市场
hegghammer

NewsAPI Search

作者 Hegghammer · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2121
总下载
2
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install newsapi-search
功能描述
Search news articles via NewsAPI with filtering by time windows, sources, domains, and languages.
安全使用建议
This package is mostly what it says: a NewsAPI client implemented in Node. Before installing or running it, verify and decide whether you are comfortable putting your NewsAPI key in ~/.openclaw/.env and ensure that file does not contain unrelated secrets. The registry metadata failing to declare NEWSAPI_KEY is a red flag — ask the publisher to update the metadata or add the key declaration yourself. Review the scripts locally (they are small and readable) to confirm there are no hidden endpoints or behaviors, and ensure the .env file has restrictive permissions (e.g., 600). If you plan to let an agent invoke the skill autonomously, consider the limited free-tier quota (100/day) and avoid storing other credentials in ~/.openclaw/.env to reduce accidental exposure.
功能分析
Type: OpenClaw Skill Name: newsapi-search Version: 1.0.0 The OpenClaw skill is designed to search news articles via NewsAPI. It securely loads the `NEWSAPI_KEY` from `~/.openclaw/.env` as instructed in `SKILL.md`. The `scripts/search.js` and `scripts/sources.js` files make network requests exclusively to `https://newsapi.org` using the provided API key, which is consistent with the skill's stated purpose. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in any of the analyzed files.
能力评估
Purpose & Capability
The name/description (NewsAPI search) aligns with the included scripts and behavior: both scripts call newsapi.org endpoints and implement search/sources functionality. However, the skill metadata declares no required environment variables or primary credential while the code clearly requires NEWSAPI_KEY — this registry omission is an inconsistency.
Instruction Scope
SKILL.md and the scripts' runtime instructions are narrowly scoped: they read a local ~/.openclaw/.env file for the API key and make HTTPS requests only to newsapi.org. The instructions do not direct reading of unrelated system files, nor do they post data to third‑party endpoints other than NewsAPI.
Install Mechanism
There is no install spec or remote download. This is an instruction-only skill with included JS scripts; nothing in the package pulls external code or installers.
Credentials
The code requires NEWSAPI_KEY but the registry metadata didn't declare it. The scripts implement a loader that reads ~/.openclaw/.env and sets process.env for every key there — so if that file contains other secrets they will be loaded into the process environment (even if the scripts don't explicitly use them). Requiring a single NewsAPI key is reasonable for the stated purpose, but the metadata mismatch and the wholesale .env loading are proportionality concerns.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configs, and does not persist beyond its scripts. Autonomous invocation is allowed by platform default but is not combined here with other high-privilege requests.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install newsapi-search
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /newsapi-search 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug newsapi-search
版本 1.0.0
许可证
累计安装 5
当前安装数 5
历史版本数 1
常见问题

NewsAPI Search 是什么?

Search news articles via NewsAPI with filtering by time windows, sources, domains, and languages. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2121 次。

如何安装 NewsAPI Search?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install newsapi-search」即可一键安装,无需额外配置。

NewsAPI Search 是免费的吗?

是的,NewsAPI Search 完全免费(开源免费),可自由下载、安装和使用。

NewsAPI Search 支持哪些平台?

NewsAPI Search 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 NewsAPI Search?

由 Hegghammer(@hegghammer)开发并维护,当前版本 v1.0.0。

💬 留言讨论