AI News Simple
v1.0.0Simple AI news briefing using bash commands. Monitors 10 top AI news sources and generates professional Chinese briefings. Use when: (1) generating AI news b...
⭐ 0· 271·0 current·0 all-time
byGary.AI@sharkwind
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name and description (AI news briefings) align with the runtime instructions: a bash script that uses curl to fetch pages and grep to extract AI-related lines. Requiring only curl is proportionate to the scraping task. However, the SKILL.md repeatedly references a '70B model' (Llama 3.1:70B) as part of the workflow while the registry and instructions provide no mechanism (no install, no env var/API key, no guidance) to run or access such a model. The README/package.json also claim 'no external dependencies' but still recommend the 70B model — this is an internal inconsistency.
Instruction Scope
The instructions stay within the task of fetching and filtering webpages with curl and grep and producing Chinese briefings; they do not instruct reading arbitrary local files or other credentials. Concern: the instructions do not show how the fetched content is handed to any LLM for 'Chinese generation' — it claims model-enhanced output without specifying whether content is sent to an external API or a local model. That ambiguity could hide data transmission to third-party services if the agent implementation sends scraped text to an external model.
Install Mechanism
There is no install spec and no code files with executable installs; the skill is instruction-only and relies on curl being present. This is low-risk from an install/execution perspective.
Credentials
The skill declares no required environment variables, credentials, or config paths — which is appropriate for a simple scraper. However, the repeated references to using a 70B model are unsupported by any declared primary credential or env vars; if the intended model is an external hosted API, the skill currently omits the necessary credential declarations, which is an inconsistency to be aware of.
Persistence & Privilege
The skill does not request always:true and has no install behavior that modifies other skills or system-wide settings. It does not request elevated persistence or privileges beyond normal agent invocation.
What to consider before installing
This skill is basically a set of bash snippets that curl 10 AI news sites and grep for keywords, which is consistent with an 'AI news briefing' purpose. Before installing, consider: (1) The SKILL.md claims use of a 'Llama 3.1:70B' model but gives no instructions on how to run or access that model — clarify whether the agent will use a local model or an external API (and if the latter, what credentials will be required). (2) If the agent will forward scraped content to a third-party model/API, that could leak the fetched text — confirm data residency and privacy policies. (3) Scraping sites with curl+grep is brittle and may violate some sites' terms or anti-scraping rules; consider rate-limiting and robots.txt compliance. (4) The skill does not request secrets or installs, so it does not appear to directly exfiltrate credentials, but the model-handling ambiguity is the main risk. If the author can confirm local-only model use (no external API) or add explicit credential fields and transparent invocation steps, the remaining concerns would be resolved.Like a lobster shell, security has layers — review code before you run it.
aivk97fnfceq6be6q6s35x7gd39vh8232ebautomationvk97fnfceq6be6q6s35x7gd39vh8232ebbriefingvk97fnfceq6be6q6s35x7gd39vh8232eblatestvk97fnfceq6be6q6s35x7gd39vh8232ebnewsvk97fnfceq6be6q6s35x7gd39vh8232ebsimplevk97fnfceq6be6q6s35x7gd39vh8232eb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📰 Clawdis
Binscurl