Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI Daily Intelligence Digest

v1.0.0

AI Daily Intelligence Digest — 自动聚合多源热点资讯,AI智能摘要提炼, 一键发布到飞书Wiki团队知识库。每天早上8点自动推送,帮助团队保持信息同步。 适用场景:运营/产品/管理层每日益汇报、竞品动态追踪、行业热点监控。 技能协同:rss-aggregator → summariz...

0· 63·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zlszhonglongshen/ai-daily-intelligence-digest.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AI Daily Intelligence Digest" (zlszhonglongshen/ai-daily-intelligence-digest) from ClawHub.
Skill page: https://clawhub.ai/zlszhonglongshen/ai-daily-intelligence-digest
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ai-daily-intelligence-digest

ClawHub CLI

Package manager switcher

npx clawhub@latest install ai-daily-intelligence-digest
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (RSS aggregation, AI summarization, publish to Feishu Wiki) matches the workflow, files, and declared dependent skills (rss-aggregator, summarize-pro, feishu-wiki). However, the registry metadata lists no required environment variables or primary credential while the SKILL.md/config explicitly reference several Feishu credentials (FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_WIKI_SPACE_ID, FEISHU_PARENT_NODE, FEISHU_APP_ACCESS_TOKEN) and an RSS_FEED_URLS env override. That mismatch is an incoherence to confirm before installing.
Instruction Scope
Runtime instructions stay within expected scope: fetch RSS feeds, call summarization skill, format and publish Markdown to Feishu Wiki, handle failures with sensible fallbacks. The instructions do not instruct reading unrelated system files or broad data collection beyond the RSS sources and the configured items. They do reference several environment variables and a config file that control behavior.
Install Mechanism
Instruction-only skill with no install spec and no code files to execute — lower risk from arbitrary downloads or install scripts. Files included are SKILL.md, README, config.yaml, and workflow.json (all declarative).
!
Credentials
The skill needs Feishu credentials and possibly an access token to create/update wiki pages — this is proportionate to the stated purpose. The concern is that the registry metadata declares no required env vars while README/SKILL.md/config refer to multiple env vars and tokens (FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_WIKI_SPACE_ID, FEISHU_PARENT_NODE, FEISHU_APP_ACCESS_TOKEN, RSS_FEED_URLS, CURRENT_DATE). It's unclear which of these the platform will ask the user to supply, what scope those tokens should have, and how long/where credentials are stored. Also troubleshooting suggests refreshing an access token, implying token lifecycle and storage behavior that should be clarified.
Persistence & Privilege
The skill is not always-enabled (always: false) and does not request system-wide modifications. It relies on scheduled runs (cron) or manual invocation. Autonomous invocation is allowed by default (disable-model-invocation: false), which is normal; there is no indication it will modify other skills or global agent settings.
What to consider before installing
This skill appears to do what it says (aggregate RSS, summarize, publish to Feishu), but there is an important mismatch: the registry claims no required environment variables while the SKILL.md and config refer to multiple Feishu credentials and tokens. Before installing or providing secrets, confirm the following: (1) exactly which environment variables/credentials the platform will request and whether they are mandatory; (2) the minimum required scope for Feishu tokens (give the least privilege token that can create/update the target wiki space rather than full admin credentials); (3) how/where tokens are stored and whether the skill or platform will persist them; (4) how dependent skills (rss-aggregator, summarize-pro, feishu-wiki) handle credentials and network access; and (5) whether scheduled runs (cron) will autonomously publish content (test initially in a staging space). If you cannot verify token handling or least-privilege usage, test in an isolated/non-production Feishu workspace and avoid supplying high-privilege credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97eptm3fwbe1ened84ykyfhqh84retn
63downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

AI Daily Intelligence Digest

Overview

This skill combo automatically aggregates news from multiple RSS sources, uses AI to summarize key insights, and publishes a formatted daily digest to a Feishu Wiki knowledge base.

Workflow

[RSS Sources] → rss-aggregator → [Raw Articles]
                                            ↓
                               summarize-pro (batch summarize)
                                            ↓
                               [Digest Summary] → feishu-wiki → [Published Wiki Page]

Prerequisites

  1. RSS Feeds configured — Add your target RSS feed URLs to the config
  2. Feishu Wiki access — Valid Feishu access token and target Wiki space/node
  3. OpenClaw environment variables:
    • FEISHU_APP_ID / FEISHU_APP_SECRET (for Wiki API)
    • RSS_FEED_URLS (comma-separated, optional override)

Usage

# Manual trigger
openclaw run ai-daily-intelligence-digest

# Via cron (recommended: daily 8:00 AM)
openclaw cron add "0 8 * * *" "ai-daily-intelligence-digest" --name "AI日报"

Configuration

Create config.yaml in the skill directory:

rss:
  feeds:
    - https://hnrss.org/frontpage
    - https://feeds.bbci.co.uk/news/technology/rss.xml
    - https://www.techcrunch.com/feed/
  max_articles: 10
  language: en

summarize:
  model: gpt-4o-mini
  max_length: 300
  style: bullet_points

feishu:
  wiki_space_id: "${FEISHU_WIKI_SPACE_ID}"
  parent_node_token: "${FEISHU_PARENT_NODE}"
  title_prefix: "📰 AI日报"
  time_format: "%Y年%m月%d日"

Output Format

The published Feishu Wiki page contains:

  • Header: Date + title
  • Top Stories: Bulleted summaries of top N articles
  • Key Insights: AI-generated bullet points
  • Source Links: Full article URLs for further reading
  • Footer: "Generated by AI Daily Intelligence Digest"

Error Handling

  • If RSS fetch fails: skip to next feed, log error
  • If summarize fails: include raw title + link
  • If Feishu publish fails: output draft markdown to console

Troubleshooting

IssueSolution
Empty digestCheck RSS feeds are reachable; verify network access
Feishu auth errorRefresh FEISHU_APP_ACCESS_TOKEN
Summarize timeoutReduce max_articles in config

Comments

Loading comments...