Super Rss Agent

功能强大的 RSS 订阅管理与阅读工具。用于 (1) 导入/导出 OPML 文件, (2) 管理 RSS 订阅源（支持自动发现）, (3) 扫描并追踪文章的已读/未读状态, (4) 无 RSS 站点的 HTML 抓取回退, (5) 渐进式阅读与文章摘要, (6) 文章搜索与统计, (7) 自动清理旧文章。

This skill appears coherent and implements the advertised RSS functionality. Before installing: (1) run pip install -r requirements.txt inside a virtualenv to install dependencies; (2) be aware the default SQLite DB is created in the skill directory (super_rss_agent.db) — use the --db option to place it somewhere you control/back up; (3) the tool performs network fetches of the URLs you add — SSRF protections and response-size/time limits are implemented, but avoid adding internal-only URLs unless you trust the environment; (4) no credentials or tokens are required by the skill; (5) if you plan to enable automated/cron runs, consider running it in a constrained environment (container or limited-permission account) and review the code yourself if you need a higher assurance level.

Type: OpenClaw Skill Name: super-rss-agent Version: 0.1.0 The Super RSS Agent is a well-engineered tool for RSS management with explicit security controls. It implements robust SSRF protection in `scripts/scanner.py` by blocking private/internal IP ranges and validating manual redirects, uses `defusedxml` to prevent XXE attacks, and employs parameterized SQL queries in `scripts/storage.py` to mitigate SQL injection. The logic is transparent, lacks obfuscation, and the instructions in `SKILL.md` are strictly aligned with the tool's stated functionality.