AIPM DeepNews Daily
v1.0.0AI Product Manager daily intelligence digest. Fetches news from 16+ curated RSS sources across tech media, AI labs, research papers, developer communities, a...
⭐ 0· 194·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily AI news digest) match the actual behavior: the script fetches a curated list of RSS feeds, filters by date, deduplicates, translates to Chinese, and emits a Markdown digest. Declared requirements (none) align with the code (no env vars or credentials required).
Instruction Scope
SKILL.md instructs creating a venv and installing feedparser and googletrans then running the script, which is exactly what the code expects. The doc mentions optional pushing to Telegram/WhatsApp/Slack, but the included script does not implement any push integrations — that is an advertised capability not present in the code. The script fetches network resources (RSS feeds and Google Translate via googletrans) and writes two local files (seen_articles.json and latest_digest.md), which is expected for this purpose.
Install Mechanism
This is an instruction-only skill (no platform install spec). The provided setup uses pip to install dependencies from PyPI (feedparser, googletrans==4.0.0-rc1). Installing from PyPI is normal for a Python script; there are no downloads from untrusted personal URLs or archive extraction steps.
Credentials
The skill requests no environment variables or credentials and the code does not read secrets. Network access to RSS feeds and to the translation service is necessary for its function, and local file writes for cache/output are proportional to the stated purpose.
Persistence & Privilege
always:false and no special OS privileges. The skill stores a local cache and output in its directory only and does not modify other skills or global agent settings.
Assessment
This skill appears coherent and self-contained. Things to consider before installing:
- It fetches public RSS feeds and uses the googletrans PyPI package that scrapes Google Translate (no API key). This is functional but may be less stable than an official paid API and could break if Google changes their web endpoints.
- The script writes seen_articles.json and latest_digest.md in the skill directory — review where the skill will run to ensure those files are stored where you expect and don't overwrite important data.
- The SKILL.md mentions pushing to messaging apps, but the shipped script does not implement that; if you expect automatic pushing, you’ll need to add integrations (which may require API keys and additional permissions).
- As with any code you install, review the pip packages you install (and consider pinning versions) and run in a contained environment (virtualenv, container) if you are concerned about dependency supply-chain risks.
Overall, no secrets or elevated privileges are requested and the functionality matches the description.Like a lobster shell, security has layers — review code before you run it.
latestvk977x6jcqjh4vgm5r8s93rmv9d82p1gt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.