Ai News Zh.Bak
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent instruction-only AI news aggregation and posting skill, with disclosed scheduled posting and optional search/messaging integrations but no hidden code.
This skill appears safe to install as an instruction-only public-news briefing workflow. Before enabling automation, manually test one run, verify the sources and Chinese output quality, choose a limited Feishu/Telegram/Discord destination, and keep any optional Brave API key separate from unrelated credentials.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
External articles or pages could contain misleading text that a model might over-trust while summarizing.
The skill asks the agent to fetch and process external web/RSS content. That is core to the purpose, but fetched pages should be treated as untrusted source material rather than instructions.
1. 依次抓取各数据源(web_fetch)
Use the fetched content only as data for summarization, and do not let webpage text change the user’s requested workflow or posting rules.
Incorrect summaries or unwanted items could be sent to a team or public channel if configured without review.
The skill may use a messaging capability to send generated briefings to external chat platforms. This is purpose-aligned, but it can create visible posts outside the local agent session.
支持定时推送到飞书、Telegram、Discord等渠道
Test with manual triggering first, choose a limited destination channel, and require review before posting to large or public audiences.
If web_search is enabled, the user may need to provide a third-party API key with search-service permissions.
The skill mentions an optional Brave API key for web search, while the registry declares no required environment variables. This is expected for optional search integration but should be consciously configured.
web_search 可大幅提升采集能力(可选,需Brave API key)
Use a dedicated, least-privilege search API key if enabling web_search, and avoid exposing unrelated credentials.
The package appears to be a backup or renamed copy, so its identity is not perfectly consistent across metadata.
The embedded metadata slug differs from the registry slug shown for the evaluated package, ai-news-zh-bak. With unknown source and no homepage, this is a small provenance/packaging inconsistency to notice.
"slug": "ai-news-zh"
Confirm that this is the intended package/version before relying on it for recurring channel posts.
Once scheduled, the agent may keep fetching and posting daily until the schedule is changed or removed.
The skill recommends a recurring scheduled task. This is disclosed and central to the daily-news purpose, but it is still persistent automated behavior.
定时推送(推荐) 设置cron任务,每天早上自动推送
Keep the schedule visible and easy to disable, and run it manually once first to verify formatting, sources, and destination.
