Ai News Zh.Bak

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only AI news aggregation and posting skill, with disclosed scheduled posting and optional search/messaging integrations but no hidden code.

This skill appears safe to install as an instruction-only public-news briefing workflow. Before enabling automation, manually test one run, verify the sources and Chinese output quality, choose a limited Feishu/Telegram/Discord destination, and keep any optional Brave API key separate from unrelated credentials.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

External articles or pages could contain misleading text that a model might over-trust while summarizing.

Why it was flagged

The skill asks the agent to fetch and process external web/RSS content. That is core to the purpose, but fetched pages should be treated as untrusted source material rather than instructions.

Skill content
1. 依次抓取各数据源(web_fetch)
Recommendation

Use the fetched content only as data for summarization, and do not let webpage text change the user’s requested workflow or posting rules.

What this means

Incorrect summaries or unwanted items could be sent to a team or public channel if configured without review.

Why it was flagged

The skill may use a messaging capability to send generated briefings to external chat platforms. This is purpose-aligned, but it can create visible posts outside the local agent session.

Skill content
支持定时推送到飞书、Telegram、Discord等渠道
Recommendation

Test with manual triggering first, choose a limited destination channel, and require review before posting to large or public audiences.

What this means

If web_search is enabled, the user may need to provide a third-party API key with search-service permissions.

Why it was flagged

The skill mentions an optional Brave API key for web search, while the registry declares no required environment variables. This is expected for optional search integration but should be consciously configured.

Skill content
web_search 可大幅提升采集能力(可选,需Brave API key)
Recommendation

Use a dedicated, least-privilege search API key if enabling web_search, and avoid exposing unrelated credentials.

What this means

The package appears to be a backup or renamed copy, so its identity is not perfectly consistent across metadata.

Why it was flagged

The embedded metadata slug differs from the registry slug shown for the evaluated package, ai-news-zh-bak. With unknown source and no homepage, this is a small provenance/packaging inconsistency to notice.

Skill content
"slug": "ai-news-zh"
Recommendation

Confirm that this is the intended package/version before relying on it for recurring channel posts.

What this means

Once scheduled, the agent may keep fetching and posting daily until the schedule is changed or removed.

Why it was flagged

The skill recommends a recurring scheduled task. This is disclosed and central to the daily-news purpose, but it is still persistent automated behavior.

Skill content
定时推送(推荐)
设置cron任务,每天早上自动推送
Recommendation

Keep the schedule visible and easy to disable, and run it manually once first to verify formatting, sources, and destination.