Pings News (News Agent)

从 Wink Pings 免费获取最新新闻，用用户邮箱作为 user_id 绑定个人订阅并拉取列表。 在用户表达要看「最新 AI 新闻」、提到「Pings」「Wink Pings」「wink pings」、或明确要看 Pings/Wink 资讯与订阅新闻时使用；若未提供邮箱则先收集邮箱再请求。

This skill appears to do what it says: prompt for (or read) a user email, use it as user_id, call https://wink.run/api/pings/latest, and display formatted results. Before installing: (1) confirm you trust the wink.run endpoint because the skill will send the provided email to that service; (2) consider whether you want the email saved to disk in plaintext at skills/pings/pings-user-email — if not, decline to persist it when prompted; (3) ensure the workspace repository ignores that file (SKILL.md says it’s in .gitignore) so it’s not accidentally committed; (4) avoid supplying someone else’s credentials or email. If you need stronger protection, keep emails out of disk storage and allow the skill to run without persistence, or route requests through a network monitor/proxy to verify traffic.

Type: OpenClaw Skill Name: pings Version: 1.1.6 The skill is designed to fetch personalized news from the 'Wink Pings' service (wink.run). It instructs the agent to manage a local configuration file (skills/pings/pings-user-email) to store and retrieve the user's email address, which is used as a user_id for API requests. While it involves PII collection and local file I/O, the instructions are transparent, require user confirmation, and are strictly aligned with the stated purpose of the skill. No evidence of malicious exfiltration, obfuscation, or unauthorized command execution was found.