NewsToday

NewsToday solves information overload for users who want to stay informed without spending an hour checking scattered sources. Instead of manually browsing W...

Security Scan

NewsToday’s code, scripts, and runtime instructions are internally consistent with a news-aggregation / push-notification skill and do not request unrelated credentials or install suspicious components.

Purpose & Capability

Name/description (news aggregation, morning/evening briefs, hotlist, breaking alerts) match the included scripts (rss-fetch, morning/evening/breaking prompt generators, register/preference/push-toggle). No unexpected binaries, env vars, or unrelated capabilities are requested.

Instruction Scope

SKILL.md and the scripts confine actions to expected tasks: constructing search/RSS fetch prompts, sanitizing userIds, writing small user preference files under data/users, and printing special cron-add/remove tokens. The skill relies on the agent to WebFetch/search external sources (expected for a news aggregator). The scripts explicitly avoid arbitrary file I/O or reading sensitive system paths and validate inputs to prevent path traversal.

Install Mechanism

No install spec or external downloads. This is instruction + included JS scripts only; nothing will be fetched from remote installers at install time.

Credentials

No required environment variables or credentials are declared or used. Scripts use only command-line args and write per-skill user preference files (data/users/<userId>.json).

Persistence & Privilege

Enabling push uses special stdout tokens (__OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__) to request scheduling of autonomous cron jobs that will invoke the agent and deliver messages to channels. This is expected behavior for push notifications, but it does grant the skill the ability to schedule recurring autonomous messages if the user enables push for a userId.

Assessment

This skill appears coherent for aggregating and pushing news: it fetches public RSS feeds and performs websearches, stores only per-user preference files under data/users, and does not request secrets. Note: enabling daily pushes will schedule autonomous cron jobs (platform Cron tokens printed by push-toggle.js) that cause the agent to send messages on a schedule — if you don't want autonomous pushes, do not run push-toggle.js on <userId>. Review the data/users directory and platform handling of __OPENCLAW_CRON_ADD__ tokens before enabling push for sensitive accounts. If you need greater assurance, inspect the platform's cron-creation process and check that messages are sent only to the expected channels (telegram/feishu/slack/discord).

私人新闻助手 — 早报 · 晚报 · RSS聚合 · 突发提醒 · 话题追踪 · 个性化推送

何时使用

• 用户说"早报""今天新闻""新闻摘要""今天发生了什么"
• 用户问"热搜""微博热榜""知乎热榜""X热帖"
• 用户说"AI 早报""AI 最新""人工智能动态"
• 用户想看某类新闻：科技、AI、财经、娱乐、体育、社会、国际、军事
• 用户说"追踪 XX""XX 最新消息""XX 怎么样了"
• 用户说"开启推送""订阅早报""每天推新闻"
• 用户说"突发""重大消息""有什么大事"

---

🌐 语言规则

• 默认中文；用户英文提问切英文
• 新闻标题保留原文，摘要用回复语言改写

---

📋 功能说明

早报

从 RSS（新浪/澎湃/36氪/BBC中文/Reuters中文）+ WebSearch 双源聚合，去重后选10条覆盖不同领域，按用户话题偏好加权排序。头部显示今日条数和预估阅读时长。第1条为头条（重要性最高，3-4句详细摘要+影响分析），其余9条常规格式（标题、来源、2句摘要）。财经类每条含影响评级：📈 利好 / 📉 利空 / ➡️ 中性。

晚报

收官3-5条当日重要新闻 + 1-2条热点最新进展 + 明日日程预告。

突发新闻提醒

每2小时检测（08:00-22:00），仅在满足阈值（7级以上地震、市场熔断、重大政策等）时推送，不骚扰用户。

热榜聚合

搜索微博热搜 + 知乎热榜 + 百度热搜 + X（Twitter）热帖，去重合并，标注来源，多平台共同热点置顶。X 热帖作为第三方实时信号，补充国内平台之前的舆情风向；若 X 数据不可用则静默降级，不影响其他来源输出。

话题追踪

搜索 {关键词} 最新 {日期} + {关键词} 进展 + {关键词} 官方回应，时间线倒序输出，含各方反应。

深读

用户回复序号或说"详细说说 XX"时，多角度搜索，交叉验证，呈现详细经过、各方反应、延伸阅读。

AI 早报（独立模式）

用户说"AI 早报""AI 最新""人工智能动态"时触发独立模式：专门搜索 AI 最新进展 {日期}、大模型 新闻、OpenAI Anthropic Google DeepMind 动态，输出 5 条 AI 专项摘要，含产品发布、研究突破、行业动向，与常规早报格式一致但信源更聚焦。

分类浏览

分类	搜索词
科技	科技新闻 今日、AI新闻
AI	AI 最新进展、大模型 新闻、OpenAI Anthropic 动态
财经	财经新闻 今日、股市
娱乐	娱乐新闻 今日
体育	体育新闻 今日、赛事结果
社会	社会新闻 今日、民生
国际	国际新闻 今日、外交
军事	军事新闻 今日、地区冲突、国防政策、军事演习

---

🔧 脚本说明

# 注册（可选，解锁个性化推送）
node scripts/register.js <userId> [language] [topics] [channel]
# 示例：
node scripts/register.js alice zh 科技,财经,国际 telegram
node scripts/register.js bob en tech,finance telegram

# 话题偏好
node scripts/preference.js show <userId>
node scripts/preference.js set <userId> <话题> <权重0-1>
node scripts/preference.js reset <userId>

# 手动触发（不需要注册）
node scripts/morning-push.js [userId]
node scripts/evening-push.js [userId]
node scripts/rss-fetch.js [--lang zh|en] [--topics 科技,财经,国际]
node scripts/breaking-alert.js <userId>

# 推送管理
node scripts/push-toggle.js on <userId> [--morning 08:00] [--evening 20:00] [--channel telegram]
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>

支持渠道：telegram / feishu / slack / discord

---

⚠️ 注意事项

1. 每条新闻必须标注来源媒体
2. 涉及争议内容呈现多方视角，不做立场判断
3. 不注册可直接使用早晚报；注册后可按话题个性化、开启突发提醒
4. 用户数据仅存储推送偏好和话题权重（data/users/<userId>.json），不含新闻内容
5. RSS 源无法访问时自动降级为 WebSearch，不影响正常使用