Morning Brief
v0.1.0Fetches and presents the latest international news headlines from trusted RSS feeds as a concise morning briefing.
⭐ 0· 51·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The included script fetches RSS feeds and outputs Markdown links for headlines, which matches the stated purpose. Minor mismatch: SKILL.md claims dependencies (requests, beautifulsoup4) while the script uses httpx and feedparser. Functionality requested (fetching international headlines) is coherent with the requested network access.
Instruction Scope
SKILL.md instructs the agent to run the script and to translate all headlines into Chinese and preserve original Markdown links. The script itself does not perform translation — that is an instruction for the agent rather than the script. The runtime instructions do not ask the agent to read unrelated files or environment variables; they do require network access to external RSS feeds (expected for this skill).
Install Mechanism
This is instruction-only with a bundled Python script (no installer), which is low-risk. However, SKILL.md's declared Python packages (requests, beautifulsoup4) do not match the script's imports (httpx, feedparser), so users must install the correct libraries manually.
Credentials
No environment variables, credentials, or config paths are requested. Network requests are limited to fetching RSS feeds listed in the script and are proportionate to the stated purpose.
Persistence & Privilege
The skill is not forced-always, does not request persistent agent privileges, and does not modify other skills or system-wide settings.
Assessment
This skill is internally coherent and appears benign, but before installing or running it: 1) note the mismatch between SKILL.md and the script — install httpx and feedparser (not requests/beautifulsoup4) or update the docs; 2) understand it will make outbound HTTP requests to the RSS URLs listed (ensure network policy allows this and you trust those feeds); 3) the SKILL.md asks the agent to translate headlines into Chinese and to preserve raw Markdown links — if you don't want clickable raw links exposed, change that instruction; and 4) run the script in an isolated environment (virtualenv/container) and review/adjust the hard-coded feed list if you need different sources.Like a lobster shell, security has layers — review code before you run it.
latestvk9769fa73g3qegsyktbawcg07183yhkz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.