Bloomberg Headlines
v1.0.0读取彭博社(Bloomberg)最新头条新闻。当用户想查看彭博社新闻、财经头条、Bloomberg headlines、最新市场资讯时使用此skill。
⭐ 1· 134·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill declares it will fetch Bloomberg headlines and requires a binary named 'bbgwire' to do so. Requiring a CLI client that returns JSON for this purpose is coherent.
Instruction Scope
SKILL.md only instructs the agent to run a single command ('bbgwire') and format its JSON output for the user. It does not request unrelated files, environment variables, or transmit data to unexpected endpoints in the instructions.
Install Mechanism
Install spec uses the Go module github.com/8treenet/bbgwire@latest to produce the 'bbgwire' binary. Fetching and compiling a third‑party Go module from GitHub is a standard workflow but executes arbitrary code at install time — a moderate supply‑chain risk. No homepage or publisher details are provided in the skill metadata to help assess provenance.
Credentials
The skill declares no environment variables, credentials, or config paths. This is proportionate for a read-only headline fetcher; nothing in SKILL.md attempts to access other credentials or system files.
Persistence & Privilege
always is false, the skill does not request persistent system‑wide privileges, and there are no instructions to modify other skills or global agent settings.
Assessment
This skill appears to do what it says (run a CLI that returns Bloomberg headlines), but installing it compiles a third‑party Go package from github.com/8treenet/bbgwire. Before installing: (1) inspect the GitHub repo source (8treenet/bbgwire) for unexpected behavior (network calls, data exfiltration, shelling out), (2) verify the repo's reputation, recent commits, and license, (3) run the build/install in a sandboxed environment or container if possible, (4) confirm you are comfortable with a binary that will fetch content from the network and whether that could violate Bloomberg's terms, and (5) if you need stronger assurance, ask the publisher for a signed release or prefer an official Bloomberg client. If you cannot review the code or sandbox the binary, treat the install as potentially risky.Like a lobster shell, security has layers — review code before you run it.
datavk977ht93g98t25943tsahxe6s583v8jhfinancevk977ht93g98t25943tsahxe6s583v8jhlatestvk977ht93g98t25943tsahxe6s583v8jhnewsvk977ht93g98t25943tsahxe6s583v8jh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🆕 Clawdis
OSmacOS
Binsbbgwire
Install
Install bbgwire (go)
Bins: bbgwire
go install github.com/8treenet/bbgwire@latest