Daily News
v0.1.0Use when users need daily news summaries, current events, or want to stay informed about world news in Chinese.
⭐ 0· 535·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say "daily news in Chinese" and the included script queries the 60s API (https://60s.viki.moe/v2/60s) with optional encoding and date parameters — this is consistent and there are no unrelated requirements (no unexpected env vars or binaries).
Instruction Scope
SKILL.md instructs running scripts/news.sh, which only constructs a URL and performs a curl request, then writes the API response to stdout. The script does not read local files or environment variables beyond CLI args, but it returns raw remote content (JSON, markdown, image URLs or binary via proxy) without validation — so the agent should treat responses as untrusted input and be careful when rendering images or executing downstream transformations.
Install Mechanism
There is no install spec (instruction-only plus a small included bash script). Nothing is downloaded or written to disk by an installer; risk from install mechanism is minimal.
Credentials
No environment variables, credentials, or config paths are requested. Network access to the external API is required, which is proportionate to a news-fetching skill. There are no extra or unrelated secrets requested.
Persistence & Privilege
always is false and the skill does not request persistent presence or modify other skills/config. It does not store tokens or change system settings.
Assessment
This skill is simple and coherent, but note it makes unauthenticated network calls to https://60s.viki.moe and returns whatever that service provides. Before installing: (1) confirm you trust the 60s.viki.moe domain (external content could include unexpected text or images), (2) if you want to avoid remote images or binary data, restrict usage to text/json/markdown encodings, and (3) consider running the skill in a sandboxed environment and add caching/rate limits if used frequently. If you need stronger guarantees, ask the skill author for a trusted API source or add validation of the API response.Like a lobster shell, security has layers — review code before you run it.
latestvk97fwbefp3vg7wd5ajvkj3yt4d81xr44
License
MIT-0
Free to use, modify, and redistribute. No attribution required.