ClawHub

Career News

v1.1.0

Daily profession-targeted news from X (Twitter), Google News, Grok, and global media. Supports bilingual (zh/en), multi-profession subscriptions, keyword fil...

⭐ 0· 48·0 current·0 all-time
byCosmos Fang@cosmofang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe aggregating profession news and the repository includes scripts to register users, manage extra subscriptions, toggle push, query news, and generate morning-push prompts — all consistent with the stated purpose.
ℹ
Instruction Scope
SKILL.md and the scripts produce explicit search prompts instructing searches on X (Twitter), Google News, Grok, and priority media. The scripts generate text prompts and console output; they do not themselves perform HTTP requests or exfiltrate data. Note: the prompts assume the runner/agent can search/extract data from those external services (via browsing or API), but the skill does not declare or access any credentials itself.
✓
Install Mechanism
There is no install spec and no third-party downloads. The package is pure Node.js scripts (requires node>=18). Nothing is downloaded from arbitrary URLs or extracted to nonstandard locations.
ℹ
Credentials
The package declares no required env vars or credentials and operates on local JSON files under data/users. However, the operational workflow presumes access to external services (X/Grok/Google News) for searches — if you want automated network queries you may need to provide appropriate API keys/browsing capability outside this skill. No unexpected credentials are requested.
✓
Persistence & Privilege
The skill writes user subscription data to data/users/*.json within the skill directory (normal for a local utility). always is false and the skill does not attempt to modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: it manages local user subscriptions and generates well-structured prompts to collect news from X (Twitter), Google News, Grok, and media. Before installing, consider: (1) the scripts store user profiles (userId, professions, language, region, keywords) as JSON under data/users — treat these files as potentially sensitive and back them up or protect their directory; (2) the generated prompts assume the ability to query external services — if you want automated fetching, you'll need browsing/API access or appropriate keys for Twitter/Grok/Google News, which the skill doesn't request or store; (3) the scripts only output prompts/console text and do not themselves send notifications or push messages to external endpoints, so if you plan to integrate sending (email, messaging), you should audit any added code that implements that delivery. Overall the package is internally consistent and not requesting disproportionate privileges.

Like a lobster shell, security has layers — review code before you run it.

latestvk970361akt3jztzyts608esz2s848cq6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments