Trend Radar

Real-time trending topics aggregator across 7 platforms (X/Twitter, Reddit, Google Trends, Hacker News, Zhihu, Bilibili, Weibo). Trigger: when user says 'tre...

This skill appears to do exactly what it claims: fetch public trending data from the seven listed platforms using only Python standard library HTTP calls. Before installing/using: 1) Review and run the scripts locally (e.g., python3 scripts/trends.py --mode overview) to see outputs and confirm endpoints. 2) Do NOT run the scheduler (--set) unless you want the skill to add entries to your user crontab; inspect the crontab changes printed by the command and verify the command path. 3) Be aware the scripts make outbound HTTP requests to multiple third‑party sites — if you need to limit network access, run them in a sandboxed environment. 4) The skill does not request credentials, but scraping may break or be rate-limited; the static Cookie in the Weibo HTML fallback is unusual but not a secret leak. 5) If you want more assurance, run the code in an isolated account/container and inspect ~/.openclaw/trend-radar/daily/ before allowing persistent schedules.

Type: OpenClaw Skill Name: trend-radar Version: 1.0.0 The skill is a trend aggregator that uses high-risk system capabilities to provide a 'daily briefing' feature. Specifically, `scripts/scheduler.py` manipulates the user's crontab to schedule recurring tasks, which is a common persistence mechanism. While this is a documented feature and explicitly requested in the `allowed-tools` metadata, the script lacks validation for the cron expression input, potentially allowing for command injection into the crontab. Additionally, `scripts/sources/weibo.py` contains a hardcoded session cookie used to bypass scraping protections, and `SKILL.md` uses prompt steering to discourage the agent from using standard web search tools.