AI news generator
v1.0.0Delivers a daily news digest to a Discord channel via webhook. Use this skill whenever the user wants to: send today's news to Discord, set up an automated d...
⭐ 0· 208·0 current·0 all-time
byScott Lai@scottll
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say: fetch news and post to Discord. The repository includes a send_to_discord.py that constructs a Discord embed and POSTs to a Discord webhook URL; SKILL.md describes selecting stories and invoking that script. There are no unrelated environment variables, binaries, or external services requested.
Instruction Scope
Instructions tell the agent to run a local date command, perform 2–3 web searches to gather stories, build a JSON and call the bundled script. That scope is consistent with the stated purpose. Note: SKILL.md's example invokes scripts/send_to_discord.py (relative scripts/ path), but the repo contains send_to_discord.py at the top level — this path mismatch will cause runtime errors unless corrected.
Install Mechanism
No install spec is provided (instruction-only skill with a small included script). Nothing is downloaded or written to disk by an installer; risk from install mechanism is minimal.
Credentials
No environment variables or credentials are declared. The skill requires a Discord webhook URL at runtime (a sensitive value) but does not request any unrelated secrets (AWS keys, tokens, etc.). The webhook must be supplied by the user or scheduled task.
Persistence & Privilege
The skill is not force-installed (always:false) and does not request elevated privileges or modify other skills. It does perform network I/O to the provided webhook only.
Assessment
This skill appears to do what it says: aggregate headlines and post them to a Discord webhook. Before installing or scheduling it, review these points:
- Webhook safety: the webhook URL is sensitive (anyone with it can post to the channel). Only supply a webhook you control. Do not paste a webhook from a third party.
- Network destinations: the script only posts to the provided Discord webhook URL (discord.com). If you need stricter auditing, run the script from a controlled host and monitor outbound traffic.
- Fix the path mismatch: SKILL.md shows scripts/send_to_discord.py, but the file is send_to_discord.py at the repo root. Update the scheduled task or the invocation examples so the path points to the actual script location.
- Web scraping/privacy: the skill instructs the agent to perform web searches and summarize articles. Ensure the agent's browsing/search behavior complies with your content and copyright policies, and avoid accidentally sending private/personal data to the Discord channel.
- Testing: run a manual test with a disposable webhook and verify embed formatting and rate-limit handling before enabling recurring scheduling.
If you want stronger guarantees, run the included script from your own scheduled runner and keep the webhook secret in your scheduler's secure config (not in plain text prompts).Like a lobster shell, security has layers — review code before you run it.
aivk9759frjzmk11vx0gn264jxqss82cg49latestvk9759frjzmk11vx0gn264jxqss82cg49newvk9759frjzmk11vx0gn264jxqss82cg49openclawvk9759frjzmk11vx0gn264jxqss82cg49techvk9759frjzmk11vx0gn264jxqss82cg49
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
