AI News Tracker
v1.0.0AI 与科技行业实时追踪 Skill。监控技术趋势、应用落地、公司动态、人物观点四大模块,支持多语言多平台来源,每日定时发送结构化摘要,重大事件即时发现并推送。触发条件:(1)Cron 定时任务触发;(2)用户说"帮我查一下今天 AI 有什么新闻"或类似表达。
⭐ 0· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (AI news tracker) matches the instructions: it performs web searches, fetches article content, filters by event time, de-duplicates, formats a daily draft, and sends pushes. There are no unrelated environment variables, binaries, or install steps requested that would be unexpected for a news aggregator.
Instruction Scope
Instructions explicitly tell the agent to run date commands, use batch_web_search, Jina Reader (r.jina.ai) to fetch and extract article bodies, summarize/verify dates, write/read `[WORKSPACE]/memory/ai-news-draft.md`, and send messages to Feishu (target resolved from a workspace file). These are within the tracking purpose, but they involve fetching full web content and routing it through third-party extract/summarize endpoints (Jina Reader and whatever backs batch_web_search/summarize). That has privacy/third-party exposure implications even though it is coherent with the stated function.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is the lowest install risk — nothing is written to disk by an installation process beyond the normal runtime writing the draft file as described.
Credentials
No required env vars, no credentials declared, and no configuration paths required at install time. The skill does read/write workspace memory files and expects a Feishu target ID in workspace memory; that is proportional for a push-capable news skill but relies on existing platform connectors/credentials outside the skill.
Persistence & Privilege
always:false and normal autonomous invocation settings. The skill stores drafts under `[WORKSPACE]/memory/ai-news-draft.md` and maintains short-lived push records (48h) per its own scope; it does not request permanent platform-wide privileges or modify other skills' configs.
Assessment
This skill is coherent with its purpose, but review a few practical privacy and operational points before installing:
- Third-party fetch/extract: it uses Jina Reader (https://r.jina.ai/...) to convert pages to plain text. That means article content is proxied to Jina's service — if you need to avoid sending page contents to external services, do not enable this skill or request an alternative extractor.
- Search/summarize calls: batch_web_search and summarize steps will send query text and retrieved content to the platform's search/summarization services (and likely the LLM). Expect external network calls and potential data exposure of fetched content.
- Workspace file access: the skill reads and writes `[WORKSPACE]/memory/ai-news-draft.md` and expects to read a Feishu user ID from workspace memory. Make sure no sensitive secrets are stored in that workspace path and that the Feishu target is correct.
- Feishu sending: the skill assumes an existing Feishu connector/credentials managed by the platform; verify what credentials/scopes the platform has for Feishu and whether you are comfortable with automated pushes.
- Portability/detail: the SKILL.md uses GNU date syntax (date -d) which may not work on all hosts; this is an operational (not security) detail to check.
If these exposures are acceptable for your environment (i.e., you allow content to be proxied to the indicated services and you trust the platform's Feishu connector), the skill appears internally consistent and appropriate for its stated purpose.Like a lobster shell, security has layers — review code before you run it.
AIvk973txpwy4drzrmk3j03qsg6x183hejhlatestvk973txpwy4drzrmk3j03qsg6x183hejhnewsvk973txpwy4drzrmk3j03qsg6x183hejhtechvk973txpwy4drzrmk3j03qsg6x183hejhtrackervk973txpwy4drzrmk3j03qsg6x183hejh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
