← 返回 Skills 市场
joewangup

外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送)

作者 JoeWangup · GitHub ↗ · v2.3.3 · MIT-0
cross-platform ⚠ suspicious
161
总下载
0
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install trade-news-summary
功能描述
自动抓取外贸相关多源RSS新闻,翻译标题生成中文Markdown报告,支持飞书机器人推送更新。
安全使用建议
This skill appears to implement what it claims, but several inconsistencies and missing runtime declarations mean you should be cautious before installing. Specifically: (1) the code requires BAIDU_APPID and BAIDU_SECRET (translation) and will use a FEISHU_WEBHOOK to post content — confirm you trust the webhook destination; (2) the package/registry metadata incorrectly lists no required env vars while the scripts do require secrets — fix or verify env settings before running; (3) the Python scripts require Python 3 and the 'requests' library (not declared) — install those in a controlled environment (virtualenv) first; (4) trend_analysis.py currently will fail unless FEISHU_WEBHOOK is set despite SKILL.md marking it optional; (5) the scripts write files to your home (~/trade-news.md and ~/.openclaw/workspace/history) — review and, if desired, run in an isolated account or container. If you plan to use it, ask the author to correct the manifest (declare Python + requests, clarify FEISHU_WEBHOOK requirement) or run the scripts in a sandbox until those inconsistencies are resolved.
功能分析
Type: OpenClaw Skill Name: trade-news-summary Version: 2.3.3 The skill bundle is a legitimate news aggregation tool that fetches trade-related information from RSS feeds and Hacker News, translates it using the Baidu API, and sends reports to a Feishu (Lark) webhook. The code in daily-news.sh, classify_news.py, and trend_analysis.py is well-structured, follows the stated purpose in SKILL.md, and uses environment variables for secrets as expected. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The name/description (multi-source RSS, translation, Feishu push) aligns with the included scripts: daily-news.sh fetches RSS and calls Baidu, classify_news.py builds a Feishu card, trend_analysis.py generates weekly stats. However the registry metadata at the top claims no required env vars/binaries whereas SKILL.md and clawhub.json declare BAIDU_APPID/BAIDU_SECRET and command-line tools (curl, jq, md5sum, xmlstarlet). Also the Python scripts need Python and the 'requests' library but that dependency is not declared.
Instruction Scope
SKILL.md instructs setting BAIDU credentials and optionally FEISHU_WEBHOOK and running the scripts — that fits the task. But trend_analysis.py will exit if FEISHU_WEBHOOK is unset (it treats the webhook as required), contradicting SKILL.md's 'optional' label. classify_news.py also attempts to POST to the webhook without checking it's non-empty. The scripts read/write files under the user's home (~/trade-news.md, ~/.openclaw/workspace/history) — expected for this use but worth noting.
Install Mechanism
This is instruction-only (no install spec), lowering install risk. But the runtime requirements are incomplete: the shell script lists system binaries (curl, jq, md5sum, xmlstarlet) yet the package manifest and SKILL.md omit Python and the Python 'requests' package required by the .py files. The absence of an explicit install step or dependency install is a usability/consistency issue.
Credentials
Requested secrets (BAIDU_APPID, BAIDU_SECRET) are proportional to the translation feature. FEISHU_WEBHOOK is a reasonable optional integration. However there are contradictory signals: the top-level registry metadata says 'Required env vars: none', clawhub.json lists the three env vars, SKILL.md marks FEISHU_WEBHOOK optional, but trend_analysis.py treats FEISHU_WEBHOOK as required. These inconsistencies increase risk of misconfiguration and accidental leaks if users set envs expecting different behavior.
Persistence & Privilege
The skill does not request elevated privileges or 'always: true'. It writes user-visible files in the user's home directory (~/trade-news.md and ~/.openclaw/workspace/history) and will run Python scripts; this is standard for a user-level RSS aggregation tool. Nothing modifies other skills or system-wide agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install trade-news-summary
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /trade-news-summary 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.3.3
- Version bump from 2.3.2 to 2.3.3. - No functional or documentation changes detected in this release.
v2.3.2
- Updated documentation for more accurate dependency and API usage details. - Clarified Baidu Translate usage is free up to 1 million characters per month. - Improved descriptions for Feishu bot and API requirements. - Enhanced formatting and readability in the configuration instructions. - No code changes in this version; only documentation improvements.
v2.3.1
- Version bump to 2.3.1 with no user-facing changes. - No file updates or feature modifications in this release.
v2.2.5
- Added automatic news classification into categories (e.g. hats, fabrics, freight, tariffs, e-commerce, sportswear, exchange rates, international relations, compliance, industry trends). - Introduced 7-day trend reports showing quantity and proportion of news in each category. - New helper modules: classify_news.py and trend_analysis.py to support classification and trend analytics.
v2.2.4
- No file changes detected in this version. - The documentation and features remain unchanged from the previous release.
v2.1.1
- Added Clawhub integration metadata file (clawhub.json) to the project. - No other functional changes to the skill.
v2.1.0
- Add version number (2.1.0) to the documentation header for clearer version tracking. - No changes in code or functionality; documentation updated only.
v2.0.0
**外贸资讯聚合器 2.0.0 版本主要更新:** - 增加多源 RSS 支持,可自定义关键词与 RSS 源。 - 新增百度翻译 API 集成,实现新闻标题自动翻译为中文。 - 支持生成 Markdown 格式的外贸新闻摘要报告。 - 新增可选飞书机器人推送功能。 - 配置说明与环境变量支持更加完善。
元数据
Slug trade-news-summary
版本 2.3.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 8
常见问题

外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送) 是什么?

自动抓取外贸相关多源RSS新闻,翻译标题生成中文Markdown报告,支持飞书机器人推送更新。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 161 次。

如何安装 外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送)?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install trade-news-summary」即可一键安装,无需额外配置。

外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送) 是免费的吗?

是的,外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送) 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送) 支持哪些平台?

外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送) 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 外贸资讯聚合器 (多源 RSS + 翻译 + 飞书推送)?

由 JoeWangup(@joewangup)开发并维护,当前版本 v2.3.3。

💬 留言讨论