AI News ZH - 中文AI科技日报
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: ai-news-zh Version: 1.0.0 The skill 'ai-news-zh' is designed to fetch, translate, and push AI news from specified English sources. Its requested tools (`web_fetch`, `web_search`, `message`) are directly aligned with its stated purpose. The `SKILL.md` instructions for the AI agent are benign, directing it to execute the skill's core function without any hidden malicious directives or attempts at prompt injection. While network access tools like `web_fetch` and `web_search` are powerful, their use here is justified for accessing legitimate news sources listed in `sources.md`. The mention of the `browser` tool for future Chinese sources explicitly states it is 'not included' in this skill, mitigating that potential risk.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured broadly, an incorrect or unwanted generated news digest could be posted to a team or public channel.
The skill may use a messaging tool to post generated digests to third-party channels. This is aligned with its purpose, but channel posting should be scoped and reviewed.
支持定时推送到飞书、Telegram、Discord等渠道
Configure an explicit destination channel, test manually first, and consider requiring approval before scheduled posts reach larger audiences.
The skill can use whichever search or messaging permissions the user grants to the agent environment.
The skill may rely on an optional search API key, and its optional message tool may use delegated messaging access. These credentials are expected for the advertised integrations.
web_search 可大幅提升采集能力（可选，需Brave API key）
Use least-privilege API keys and messaging bot permissions, and avoid granting access to channels unrelated to the digest.
The digest may continue posting daily until the user disables the schedule.
The skill recommends a persistent scheduled task. This is disclosed and purpose-aligned, but it means the agent can keep acting on a recurring basis.
设置cron任务，每天早上自动推送
Document where the cron/schedule is configured, set a clear owner, and periodically verify that the task and destination are still desired.