trump_news

每日拉取特朗普相关新闻（来自官方与主流通讯社信息源），经 AI 翻译成中文、编辑后推送给用户

This skill is largely coherent with its stated purpose, but pay attention to optional credential and push integrations before enabling it: - The skill can optionally fetch Truth Social posts via truthbrush if you install that library and set TRUTHSOCIAL_USERNAME/TRUTHSOCIAL_PASSWORD or TRUTHSOCIAL_TOKEN. Those env vars are not listed in the manifest; only provide them if you trust the environment and understand how you obtained the token (do not paste sensitive browser tokens into unknown places). - SKILL.md suggests calling a separate send_telegram.py (not included). If you enable automatic pushes, inspect any send_telegram.py script on the same host (or other skills that provide it) to confirm where it sends messages and what credentials it uses. That external script, not this skill, controls outbound delivery. - The scripts make network requests only to public RSS feeds and the Federal Register API (and truthbrush when configured). If you want a conservative setup, run the fetch script manually first to see its stdout, or run it in an isolated environment before enabling cron/automatic runs. - If you require stricter guarantees, ask the skill author to declare optional env vars in the manifest (TRUTHSOCIAL_*) and to avoid recommending cross-skill send_telegram invocation without explicit configuration instructions.

Type: OpenClaw Skill Name: trump-news Version: 1.0.0 The skill bundle is a legitimate news aggregator designed to fetch, translate, and push Trump-related news from authoritative sources including RSS feeds (Reuters, AP, White House), the Federal Register API, and Truth Social. The Python scripts (`scripts/fetch_trump_news.py` and `scripts/fetch_truth_social.py`) use standard libraries for networking and XML parsing, and handle Truth Social credentials via environment variables in a conventional manner for API authentication. The instructions in `SKILL.md` are clearly aligned with the stated purpose and do not contain any malicious prompt injection or unauthorized execution commands.