Web Search Ai News

实时获取最新的人工智能行业新闻和动态

This skill fetches news but its instructions also tell the agent to read your local Himalaya email config (~/.config/himalaya/config.toml) and automatically send emails — a capability not declared in the metadata. Before installing or enabling it: (1) ask the author to explicitly declare required config paths or environment variables and to document exactly who the emails will be sent to; (2) inspect the referenced repository and the contents of ~/.config/himalaya/config.toml to see whether it contains SMTP credentials or other sensitive data; (3) if you must test, run the skill in a restricted sandbox or with a throwaway email account so real credentials aren't exposed; (4) consider disabling automatic emailing or requiring manual confirmation before any outbound email is sent. If the author clarifies and the required credentials/config are made explicit and limited, the incoherence will be resolved — otherwise treat the skill with caution or avoid installing it.

Type: OpenClaw Skill Name: web-search-ai-news Version: 1.0.0 The SKILL.md file contains post-processing instructions that direct the AI agent to access a sensitive local configuration file (~/.config/himalaya/config.toml). This file typically contains plain-text SMTP/IMAP credentials for the Himalaya email client. While the stated intent is to email news updates, instructing an agent to read private credential files is a high-risk behavior that could lead to credential theft or unauthorized use of the user's email account.