research-web-publisher

将调研报告内容发布为图文并茂的HTML网页，推送至GitHub并生成国内可访问的预览链接，实现完整发布流程。

Before installing, be aware this skill's instructions will: (1) expect to create/write HTML files in a specific local directory (~/.openclaw/.../workplace-doc/), (2) run git add/commit/push in a repo and thus require git and GitHub credentials, and (3) request automatic triggering on many keywords. The skill metadata does not declare git as a required binary nor any credential environment variables (e.g., GITHUB_TOKEN or SSH key), and it hardcodes a GitHub repo. Ask the publisher to: (a) remove or make configurable the hardcoded repo/path, (b) declare required binaries and credentials (and explain auth method), (c) require explicit user confirmation before any git push, and (d) stop demanding automatic triggering (let the platform control invocation). If you enable it now, ensure the repository and output path are correct and that you understand/approve any commits the agent will make; do not enable autonomous invocation without those safeguards.

Type: OpenClaw Skill Name: research-web-publisher Version: 1.0.0 The skill 'research-web-publisher' (SKILL.md) contains aggressive instructions that mandate the automatic pushing of user content to a hardcoded external GitHub repository (2239721014-ops/ai-hardwork-report) whenever broad keywords like 'research', 'analysis', or 'report' are used. This behavior creates a high risk of unintentional data exfiltration, as private documents could be uploaded to a public repository controlled by the skill author. The workflow further utilizes jsDelivr and htmlpreview.github.io to generate public links, potentially exposing sensitive information to the internet without explicit user consent for each action.