Gold News Sentiment
v1.0.0Use this skill when users want to pull recent global gold-related news, assess short-term or medium-term market sentiment for gold, connect macro drivers lik...
⭐ 0· 124·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description match the included artifacts: two Python scripts that fetch RSS-style news from Google/Bing, deduplicate and tag items, and render cached snapshot files for downstream analysis. There are no unrelated environment variables, binaries, or external services requested.
Instruction Scope
SKILL.md explicitly instructs running the bundled scripts and reading/writing files under the skill's data/ directory (latest_news.json, latest_digest.md, latest_sentiment.md). The runtime instructions do not ask the agent to read arbitrary system files, access unrelated credentials, or post data to any endpoints other than the RSS query endpoints described. The workflow includes sensible validation (e.g., fail if retrieval empty).
Install Mechanism
There is no install spec (instruction-only plus shipped scripts). That minimizes install-time risk. The code is plain Python using standard library urllib and XML parsing; no third-party downloads or archive extraction are performed by the skill itself.
Credentials
The skill requires no environment variables, no credentials, and no config paths. Its only external interactions are network requests to public Google News and Bing RSS endpoints to collect headlines — proportional for a news-collection tool.
Persistence & Privilege
always:false and normal implicit invocation are used. The skill writes and reads only its own snapshot files under data/ and does not request system-wide configuration changes, other skills' credentials, or elevated privileges.
Assessment
This skill appears coherent and limited to fetching public RSS-style news (Google/Bing), tagging and summarizing gold-related headlines, and writing snapshot files under data/. Before installing, confirm you are comfortable allowing network access to news.google.com and bing.com from the environment where the agent runs, and that the agent may create files under the skill's data/ directory. If you run in a locked-down environment, verify Python is available and that outgoing HTTP to those hosts is permitted. Optionally review the two scripts for any environment-specific path assumptions (they write to ./data) and test them in a sandbox if you need extra assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk97ex6qhnapp7rhhybpz2h2ae183907k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
