← 返回 Skills 市场
98
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install sonarbay-news
功能描述
Search and analyze global news using SonarBay News Intelligence. Provides real-time access to 7 days of worldwide news coverage via CLI or REST API. Use when...
安全使用建议
This skill looks like a legitimate news CLI/REST integration, but exercise caution before running the installer commands it documents. Never pipe remote scripts directly into a shell without reviewing them: fetch the installer (curl https://sonarbay.com/install.sh -o install.sh) and inspect its contents and checksums first. Prefer using documented package managers or official release pages when available. If you must install, do so in an isolated environment (container or VM), verify HTTPS and the domain, look for published checksums or signed releases, and consider using the REST endpoints directly (curl against https://sonarbay.com/v1/...) to avoid executing third-party install scripts. Because the registry entry has no homepage and the source is 'unknown', verify the vendor and review the installer before trusting it with your system.
功能分析
Type: OpenClaw Skill
Name: sonarbay-news
Version: 1.0.0
The SKILL.md file instructs the AI agent to install a CLI tool using high-risk execution patterns: 'curl | sh' for Mac/Linux and 'irm | iex' for Windows. These commands download and execute remote scripts from 'https://sonarbay.com', which constitutes a Remote Code Execution (RCE) risk. While these are common installation methods for some tools, in the context of an AI agent skill, they represent a significant attack surface for prompt injection and unauthorized system access, particularly when the stated news-searching functionality is already available via the provided REST API.
能力评估
Purpose & Capability
Name/description (news search, trending, counts) align with the documented CLI commands and REST endpoints. No unrelated credentials, binaries, or config paths are requested — the declared purpose matches what the instructions show.
Instruction Scope
SKILL.md stays within the news-search domain (CLI usage, REST endpoints, examples). It does not instruct reading local files or unrelated environment variables. However, the Install section explicitly tells users to pipe remote shell/PowerShell scripts into a shell (curl https://sonarbay.com/install.sh | sh and irm https://sonarbay.com/install.ps1 | iex), which expands scope to executing arbitrary remote code on the host.
Install Mechanism
There is no formal install spec in the registry, but the documentation instructs running remote install scripts directly from sonarbay.com via pipe-to-shell and PowerShell 'iex'. This pattern downloads and executes remote code without checksums or release verification and is high-risk. Although the domain is the service domain (sonarbay.com), it is not a vetted release host like a known package registry; the script contents are not included for review.
Credentials
The skill declares no required environment variables or credentials and the REST endpoints state 'No authentication required'. That is proportionate for a public read-only news API. There is no request for unrelated secrets or system credentials in the SKILL.md.
Persistence & Privilege
Skill metadata does not request always-on inclusion or special privileges. The CLI's install and 'sonarbay update' command imply the installed tool will persist on the system if installed by the user; this is expected but should be treated as installing third-party software (inspect installer first).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sonarbay-news - 安装完成后，直接呼叫该 Skill 的名称或使用
/sonarbay-news触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of SonarBay News Intelligence.
- Provides real-time access to 7 days of global news (~100K+ articles, updated every 15 minutes).
- Search news, analyze mention counts, and discover trending entities using a CLI or REST API.
- Flexible filtering by keyword, country, source, time window, and entity type.
- All commands support JSON output for easy scripting and integration.
- No authentication required; REST API serves as a fallback for news data access.
元数据
常见问题
Sonarbay News 是什么？
Search and analyze global news using SonarBay News Intelligence. Provides real-time access to 7 days of worldwide news coverage via CLI or REST API. Use when... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 98 次。
如何安装 Sonarbay News？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sonarbay-news」即可一键安装，无需额外配置。
Sonarbay News 是免费的吗？
是的，Sonarbay News 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Sonarbay News 支持哪些平台？
Sonarbay News 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sonarbay News？
由 pavanxs（@pavanxs）开发并维护，当前版本 v1.0.0。
推荐 Skills