Yicai
v0.1.1Access and summarize public financial news from Yicai, providing keyword-based headlines, industry stats, and company event timelines without bulk scraping.
⭐ 0· 141·0 current·0 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the SKILL.md: both describe retrieving and summarizing public Yicai news, extracting headlines/timestamps/tags, channel statistics, and company event timelines. The skill does not request unrelated credentials or binaries.
Instruction Scope
Instructions stay within the stated purpose (public-page retrieval and lightweight analysis) and explicitly forbid bulk scraping. They mention dynamic rendering and waiting for page load, frequency control, and tagging results with collection time. However, the SKILL.md does not specify how to enforce rate limits, robots.txt respect, or which rendering tool to use—these are operational details the agent/runtime must supply.
Install Mechanism
Instruction-only skill with no install steps or downloads. This minimizes installation risk. (Note: because dynamic rendering is required, the runtime environment must provide an appropriate renderer/browser; the skill does not declare that dependency.)
Credentials
No environment variables, credentials, or config paths are requested. The amount of access requested (public web pages only) is proportionate to the skill's purpose.
Persistence & Privilege
always:false (default) and autonomous invocation allowed (standard). Because the skill can be invoked by the agent, consider that repeated or unsupervised autonomous runs could still generate significant web traffic; the SKILL.md's rate-control guidance is advisory only and not enforced by a declared runtime policy.
Assessment
This skill appears to do what it says: summarize publicly available Yicai news without asking for secrets or installing code. Before enabling it, verify that your agent/runtime can safely render dynamic pages (headless browser or JS-capable fetch) and that you have policies to enforce rate limits and robots.txt/terms-of-service compliance. Also note the skill has no listed author/homepage in the registry—if provenance matters, ask the publisher for more information. If you plan to allow autonomous runs, consider setting usage limits or manual review to avoid accidental high-volume requests or scraping of paywalled content.Like a lobster shell, security has layers — review code before you run it.
latestvk977j0see2bsm0qjjzwppqxv958321nq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.