ClawHub

News Source Manager (信息源管理器)

v1.0.2

Manages user's news category preferences and information sources. Stores in news-sources.json, supports add/remove/list operations. Use when (1) user wants t...

⭐ 0· 97·0 current·0 all-time
byKeDouPi(珂抖屁)@kedoupi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description claim to manage news categories and sources; the SKILL.md only reads/writes ~/.openclaw/workspace/memory/news-sources.json and loads defaults from the included references/keyword-templates.json. No unrelated environment variables, binaries, or services are required.
✓
Instruction Scope
Runtime instructions are narrowly scoped: initialize, list, add, remove, modify, and export the local news-sources.json. The skill does not instruct reading system-wide configs, secrets, or external endpoints beyond returning structured data to other local skills (e.g., insight-radar).
✓
Install Mechanism
This is instruction-only with no install spec and no code files to write or execute. No downloads, extracts, or package installs are performed by the skill itself.
✓
Credentials
requires.env is empty and the SKILL.md does not request credentials. The only persistent artifact is a JSON file under the user's OpenClaw workspace, which is appropriate for a preferences/configuration manager.
✓
Persistence & Privilege
always is false and the skill does not request elevated or cross-skill configuration changes. It persists only its own config file in the user's workspace. Note: autonomous invocation is allowed by default (disable-model-invocation: false), which is expected for skills and not in itself a concern here.
Scan Findings in Context
[NO_REGEX_FINDINGS] expected: The regex-based scanner had no matches because this is an instruction-only skill with no executable code files; that absence is expected for a config/templating skill.
Assessment
This skill appears to do only local configuration management (storing your news categories and source lists in ~/.openclaw/workspace/memory/news-sources.json) and does not ask for credentials or install software. Before installing, consider: (1) review the stored JSON contents if you have privacy concerns—preferences and chosen sources are persisted locally; (2) check any downstream skills (like insight-radar) that will read this config, because those skills may perform network searches or send data externally; and (3) if you share your OpenClaw workspace, be aware other users or skills with access to that workspace can read the file. Otherwise, the skill is coherent and proportional to its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

categoriesvk978ppr7q1ff07ad1gfsfebz6983kygvconfigurationvk978ppr7q1ff07ad1gfsfebz6983kygvlatestvk970dg2hpehj0s1d3twwc13srh83rw3bnewsvk978ppr7q1ff07ad1gfsfebz6983kygvpreferencesvk978ppr7q1ff07ad1gfsfebz6983kygvsourcesvk978ppr7q1ff07ad1gfsfebz6983kygv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments