Unified News

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may retrieve news from an external service and send generated summaries to Feishu.

Why it was flagged

The skill instructs the agent to call an external news API and use a messaging tool to send the formatted result to Feishu. This is expected for a news-push skill, but it is still outbound tool use.

Skill content
curl -s -X GET "https://ai.6551.io/open/free_hot?category=crypto" ... { "action": "send", "channel": "feishu", "message": "格式化后的新闻内容" }
Recommendation

Use it only for intended news delivery, and verify the Feishu destination before sending or scheduling messages.

What this means

A local record of sent news items may persist across runs and affect future filtering.

Why it was flagged

The skill uses a persistent local file to remember sent news IDs for deduplication. This is purpose-aligned, but it creates reusable local state.

Skill content
检查本地文件 `memory/news-sent.md` 读取今天已发送的新闻 ID ... 将已发送的新闻 ID 追加到 `memory/news-sent.md`
Recommendation

Keep the memory file limited to news IDs or titles, and delete or review it if you want to reset the deduplication history.

What this means

If the cron command is created, Feishu news messages may continue on a schedule until the task is disabled.

Why it was flagged

The skill provides a user-directed cron setup for recurring autonomous news pushes every 4 hours. This matches the stated timed-push purpose, but it creates ongoing activity.

Skill content
openclaw cron create --name "新闻热点推送" --every "4h" ... --channel feishu ... --to <target-user-id> ... --announce
Recommendation

Create the cron task only if recurring pushes are desired, confirm the bot account and recipient, and know how to remove the schedule.