Cailianpress Unified

v0.1.5

提供统一稳定的财联社电报数据访问,支持加红、电报、热度查询及文章详情,保证数据可审计和格式统一。

0· 129·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the actual code and docs: adapters fetch from CLS endpoints, service layer normalizes items, CLI and SQLite snapshot/ingest/query tools are present. No unrelated credentials, binaries, or external services are requested.
Instruction Scope
SKILL.md limits scope to telegraph queries, detail resolution, snapshot/sqlite modes and operational advice (cron, tests). Runtime instructions and code only access local files under the skill tree and CLS endpoints; they do not read unrelated system files or attempt to transmit data to unexpected external hosts.
Install Mechanism
No install spec is provided (instruction-only in metadata) and only a minimal requirements.txt (requests). There are source files included; nothing is downloaded from arbitrary URLs and no extract/install steps are declared.
Credentials
No required environment variables or credentials are declared or accessed. The code performs network calls only to documented CLS hosts and writes local DB/files under the skill workspace, which is proportional to the stated purpose.
Persistence & Privilege
The skill creates and uses a local SQLite DB (data/telegraph.db) and a JSONL snapshot file and includes a prune script that deletes telegraph_raw_log rows older than 30 days. It does not request system-wide privileges or modify other skills, but users should be aware it stores and prunes local audit data when scheduled.
Assessment
This skill appears to do what it says: it fetches CLS telegraphs, normalizes them, and stores/query them locally. Before installing: 1) Review and accept that it will create files under skills/cailianpress-unified/data (telegraph.db and JSONL snapshots). 2) Note the raw-log retention policy: cls_prune_raw_log.py deletes telegraph_raw_log entries older than 30 days—if you need longer audit retention, modify the script or archive data before pruning. 3) The code makes HTTP requests only to CLS domains (www.cls.cn and api3.cls.cn); confirm this is acceptable and complies with your usage policies/CLS terms. 4) If you plan to run the ingest/snapshot cron entries, run the tests locally first (pytest) and/or run in an isolated workspace to avoid mixing with other data. 5) No secrets are requested, but you should still review and vet the code before scheduling automated runs. Autonomous agent invocation is enabled by platform default, but this skill is not marked always:true; restrict autonomous usage if you do not want agents to call it without explicit action.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d3jpg66awmxkt959b6kkyh983w187

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments