← 返回 Skills 市场
科技新闻日报
作者
binhuatochina
· GitHub ↗
· v0.3.0
· MIT-0
89
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tech-news-daily-report
功能描述
科技新闻日报技能。每日科技新闻热榜整理与报告生成。当用户说"科技新闻日报"、"整理今日科技新闻"、"生成科技新闻热榜"、"tech-news-daily"、"TechNews-Daily-Report"或类似表达时触发。功能包括:(1) 使用 Tavily 搜索引擎近7天科技/AI 新闻进行搜索;(2) 按相关度...
安全使用建议
This skill appears to do what it says (collect/organize tech news and sync to Feishu), but it has important inconsistencies you should resolve before installing: 1) Confirm how Feishu authentication is provided — the SKILL.md expects owner_open_id, folder_token/space_id and the ability to post to groups but the skill declares no required credentials. Do not supply global/High-privilege tokens blindly. 2) The references file contains hard-coded space_id/node_token/owner_open_id values — verify these belong to you or are placeholders; hard-coded tokens can leak access. 3) Ask the author which credentials the agent/platform will use for Tavily and Feishu operations and whether those credentials are scoped (least privilege) to only create docs/post messages. 4) Confirm what 'memory/YYYY-MM-DD...' maps to on your agent (where files are written, retention, access controls). 5) If you cannot verify ownership/intent for the Feishu tokens and required permissions, avoid installing/using the skill or replace tokens with your own scoped credentials. Providing these clarifications would raise confidence and could make the skill benign.
功能分析
Type: OpenClaw Skill
Name: tech-news-daily-report
Version: 0.3.0
The skill contains hardcoded Feishu identifiers, including a specific chat ID (oc_d591432cedf9a00c01878c24754cb050) and knowledge base space ID (7621391289904516315), as targets for data delivery in SKILL.md and references/feishu-doc.md. While the primary function is news aggregation, the explicit instructions to send reports to these predefined external endpoints rather than user-controlled destinations represent a data redirection risk, although the content being sent (tech news) is not inherently sensitive.
能力评估
Purpose & Capability
The name and description (daily tech news collection, Tavily search, write local file, sync to Feishu) align with the instructions. However, the SKILL.md expects Feishu operations (create/write docs, send group messages) and references owner_open_id, folder_token and space_id — yet the skill declares no required environment variables or credentials. Asking for Feishu access is reasonable for the stated purpose, but the lack of declared credentials is an incoherence.
Instruction Scope
Instructions are specific and scoped to the task (search, merge, de-duplicate, score, generate theme graph, write files, create Feishu doc, send to Feishu group). Concerns: (1) the references file contains apparently hard-coded tokens/IDs (space_id, node_token, owner_open_id) which could be sensitive or misleading if they belong to someone else; (2) the skill instructs direct writes to a local 'memory/...' path and checkpoint JSON files — this is expected for caching but the platform/agent semantics of 'memory/' and permissions should be confirmed; (3) the SKILL.md implicitly relies on Feishu and message tooling without declaring or explaining required auth/consent.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal install risk. No external downloads or package installs are requested.
Credentials
The skill performs actions that require credentials/permissions (create/write Feishu docs, post to Feishu group, possibly access Tavily). Yet requires.env is empty. This is disproportionate because Feishu tokens, owner_open_id, folder_token or equivalent API credentials should be declared and provided by the user; hard-coded tokens in references are suspicious and may not be appropriate to reuse.
Persistence & Privilege
always is false and the skill does not request to persist itself or modify other skills. It writes to its own memory/checkpoint files, which is consistent with its function. Autonomous invocation is allowed (platform default) but not by itself a red flag here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install tech-news-daily-report - 安装完成后,直接呼叫该 Skill 的名称或使用
/tech-news-daily-report触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.3.0
新增主题关联图功能,帮助快速定位知识节点;优化报告结构;更新checkpoint步骤编号
元数据
常见问题
科技新闻日报 是什么?
科技新闻日报技能。每日科技新闻热榜整理与报告生成。当用户说"科技新闻日报"、"整理今日科技新闻"、"生成科技新闻热榜"、"tech-news-daily"、"TechNews-Daily-Report"或类似表达时触发。功能包括:(1) 使用 Tavily 搜索引擎近7天科技/AI 新闻进行搜索;(2) 按相关度... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 89 次。
如何安装 科技新闻日报?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tech-news-daily-report」即可一键安装,无需额外配置。
科技新闻日报 是免费的吗?
是的,科技新闻日报 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
科技新闻日报 支持哪些平台?
科技新闻日报 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 科技新闻日报?
由 binhuatochina(@binhuatochina)开发并维护,当前版本 v0.3.0。
推荐 Skills