Turkey News

Türkiye'den önemli haberleri RSS ile çekip özetleyen skill. Cron ile otomatik bildirim yapar.

This skill fetches RSS feeds and prints JSON summaries — that part is coherent and the included script is small and readable. However, SKILL.md says the agent will automatically notify a Telegram user named “Usta”, but there is no Telegram code or declared credentials. Before installing: (1) ask the author how Telegram notifications are intended to work and where bot token/chat-id come from; (2) if you plan to enable automatic Telegram posting, provide credentials only if you trust the skill and the environment — avoid putting secrets into unknown files; (3) consider whether your agent already has a separate Telegram integration (if so, confirm it won’t leak other data); (4) note the script uses simple regex XML parsing (fragile) and logs no sensitive info, but confirm you are comfortable with network access to the listed feed domains and any scheduling behavior. If the author cannot justify the Telegram flow or provide safe instructions for supplying credentials, treat this skill as untrusted.

Type: OpenClaw Skill Name: turkey-news Version: 1.0.0 The skill is designed to fetch and summarize news from legitimate Turkish RSS feeds. The `SKILL.md` instructions guide the agent to execute a local script (`scripts/fetch-news.js`), filter its output, summarize the news, and notify the user via Telegram. The `scripts/fetch-news.js` script makes network requests only to the predefined, legitimate news RSS URLs, parses the content, and outputs JSON. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's security or intended function. The use of regex for XML parsing is a potential vulnerability in robustness but does not indicate malicious intent.