游戏王日版新闻每日总结
v1.0.0每天自动搜索并中文总结前一天的游戏王日版新闻，包括新卡、规则、赛事及产品发售信息，推送至当前对话。
⭐ 0· 383·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description (daily Japanese Yu-Gi-Oh news summary) match the SKILL.md intent, but the instructions assume availability of the 'openclaw' CLI and instruct copying files into /root/.openclaw/skills while the registry metadata declares no required binaries and no config path access. Requiring the openclaw CLI (and writing to /root) should have been declared.
Instruction Scope
SKILL.md directs the agent to perform web searches and push summaries into the current conversation (expected), but it also gives explicit shell commands to create /root/.openclaw/skills and to run 'openclaw cron add'. Those file-system and CLI references are outside the declared requirements. The instructions do not specify trusted news sources or limits on scraping, so network access and content sourcing are underspecified.
Install Mechanism
There is no formal install spec (instruction-only), which is low risk, but the provided manual install steps copy the skill into /root/.openclaw/skills. This is a user-side manual action rather than an automated installer; still, suggesting /root may be inappropriate and surprising for non-root users.
Credentials
The skill declares no environment variables, credentials, or config paths and its runtime instructions do not request secrets. Nothing appears to ask for unrelated credentials.
Persistence & Privilege
The skill recommends creating a recurring cron job (openclaw cron add) that will autonomously run each morning and push messages into the current conversation. always:false, so it isn't force-included, but scheduled autonomous posting has privacy/notification implications that the user should accept explicitly.
What to consider before installing
What to check before installing: 1) The SKILL.md expects an 'openclaw' CLI and tells you to copy files into /root — confirm you actually have the openclaw binary and consider installing to a non-root path if you are not root. 2) Understand that creating the cron job will make the agent post into the conversation daily; ensure you want automated messages and that the conversation channel allows it. 3) The skill does web searches but doesn't list trusted sources — decide if you are comfortable with a summarizer scraping the web and possibly including unverified content. 4) Ask the author or inspect how the agent performs searches (which sites/APIs, rate limits, scraping behavior) if you need stricter source control. 5) If you prefer tighter control, create the cron job manually and review one run interactively before enabling recurring posts. The inconsistency between declared requirements and the instructions is likely an oversight, but you should resolve it before granting persistent/autonomous execution.Like a lobster shell, security has layers — review code before you run it.
latestvk979nmg21c718ya1w7tgckw3rh81p6mz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.