Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI Intel Daily

v1.0.0

AI Product Manager daily intelligence digest. Fetches news from 16+ curated RSS sources across tech media, AI labs, research papers, developer communities, a...

0· 286·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for janettbella69/ai-intel-daily.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AI Intel Daily" (janettbella69/ai-intel-daily) from ClawHub.
Skill page: https://clawhub.ai/janettbella69/ai-intel-daily
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ai-intel-daily

ClawHub CLI

Package manager switcher

npx clawhub@latest install ai-intel-daily
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (RSS-based AI news digest, Chinese translation, dedupe, date filtering) matches the included script and SKILL.md. The script fetches the listed feeds, filters by date, deduplicates, translates, caches seen items, and writes a Markdown digest—these are coherent with the stated purpose.
Instruction Scope
SKILL.md only instructs to create a venv, pip install feedparser and googletrans, and run the provided script. The script only reads/writes files in its directory (seen_articles.json, latest_digest.md), fetches public RSS feeds and translation endpoints, and prints the digest. It does not access unrelated system config or environment variables. However, the SKILL.md claims use of “Google Translate API (no config)”, while the code uses the unofficial googletrans library (which performs HTTP requests to Google Translate endpoints), so network calls go beyond RSS sources and may be subject to blocking, rate limits, or different privacy/ToS implications.
Install Mechanism
No packaged install in the registry; installation is instruction-only and uses pip to install feedparser and googletrans==4.0.0-rc1 into a local venv. Using PyPI packages is expected here, but googletrans is an unofficial client (4.0.0-rc1) and can be fragile or perform scraping-like requests. This is moderate risk relative to installing only vetted system packages.
Credentials
The skill declares no required credentials or env vars, and the code does not read secrets. That is proportional. But SKILL.md's wording (“Google Translate API, no config”) is misleading—no Google Cloud API key is used; instead the unofficial googletrans is used. This is a potential surprise for users expecting an officially authenticated API and has reliability/ToS implications.
Persistence & Privilege
The skill is not forced-always, does not request elevated agent privileges, and only writes two local files in its own directory (seen_articles.json and latest_digest.md). It does not modify other skills or system-wide config.
What to consider before installing
This skill appears to implement the advertised RSS-to-Chinese-digest functionality, but review before running: (1) The SKILL.md says “Google Translate API” but the code uses the unofficial googletrans package (no API key) which performs HTTP calls to Google's translate endpoints—this can break, be rate-limited, or violate terms. (2) The code awaits translator.translate (an apparent async/sync mismatch) and may crash; expect runtime bugs. (3) The script installs a third-party PyPI package (googletrans==4.0.0-rc1) — if you care about supply-chain risk, inspect that package or replace it with an official client (e.g., google-cloud-translate with a proper API key) or another vetted translator. (4) The script writes seen_articles.json and latest_digest.md into the skill folder and fetches many external RSS/translation endpoints; run it in an isolated environment (sandbox or container), verify network policy, and check the googletrans package source and recent security reports before trusting it with sensitive environments. If you only want to try it, run it locally in a disposable venv and inspect network traffic and package contents first.

Like a lobster shell, security has layers — review code before you run it.

latestvk970qeqsv1bx84780vnhsse72s82qtrd
286downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

AIPM News Digest / AI 产品经理情报日报

面向 AI 从业者和产品经理的每日情报采集工具。从 16+ 精选 RSS 源自动抓取最新 AI 资讯,翻译成中文摘要,按来源分类输出 Markdown 格式日报。

信息源覆盖

科技媒体

来源说明
TechCrunch AI硅谷顶级科技媒体 AI 频道
The Verge AI消费科技视角的 AI 报道
Ars Technica深度技术分析
MIT Technology ReviewMIT 技术评论,前沿趋势

AI 实验室官方博客

来源说明
OpenAI BlogGPT/ChatGPT/Sora 等产品动态
Google AI BlogGemini/DeepMind 研究进展
DeepMind BlogAlphaFold 等基础研究
Anthropic BlogClaude 系列模型与安全研究
Hugging Face Blog开源模型与社区生态

学术论文

来源说明
arXiv cs.AI人工智能核心论文
arXiv cs.CL自然语言处理/LLM 论文

开发者社区

来源说明
r/MachineLearningReddit 机器学习板块热帖
r/LocalLLaMA本地大模型部署社区
Hacker NewsYC 创业社区 AI 热议(50+ 赞)

播客与深度内容

来源说明
Latent SpaceAI 工程师播客,嘉宾质量极高
The Cognitive RevolutionAI 认知革命,行业领袖访谈

Setup

cd skills/aipm-news-digest && python3 -m venv venv && ./venv/bin/pip install feedparser googletrans==4.0.0-rc1

无需任何 API Key,开箱即用。

Usage

cd skills/aipm-news-digest && ./venv/bin/python fetch_ai_news_improved.py

输出示例:

🤖 AI 资讯日报 - 2026-03-11 08:00 UTC
📰 共 25 条新资讯

---
### 📌 OpenAI Blog
**GPT-5 发布:多模态推理能力大幅提升**
> OpenAI 今日发布 GPT-5,在数学推理和代码生成方面...
🔗 原文链接

### 📌 arXiv cs.CL
**基于强化学习的大语言模型对齐新方法**
> 本文提出一种新的 RLHF 替代方案...
🔗 原文链接

Features

  • 16+ 精选源 — 覆盖媒体、实验室、论文、社区、播客五大维度
  • 自动去重 — 基于内容哈希,不会重复推送
  • 时间过滤 — 只推送 3 天内的文章,过期自动跳过
  • 缓存自清理 — 7 天自动清理已读记录
  • 免费翻译 — Google Translate API,无需额外配置
  • 可配置MAX_ARTICLES_PER_FEED(每源上限)、MAX_TOTAL_ARTICLES(总条数)、MAX_DAYS_OLD(时效天数)均可调整

重点追踪对象

硅谷大厂

  • OpenAI — GPT/ChatGPT/Sora/o系列,Sam Altman 动态
  • Google DeepMind — Gemini/AlphaFold,Demis Hassabis、Jeff Dean
  • Anthropic — Claude 系列,Dario Amodei、Amanda Askell
  • Meta AI — LLaMA 开源生态,Yann LeCun
  • Apple — Apple Intelligence/端侧模型,Craig Federighi
  • Microsoft — Copilot/Azure AI,Satya Nadella、Kevin Scott
  • NVIDIA — GPU/CUDA/推理加速,Jensen Huang

AI 核心人物

  • Andrej Karpathy — 前 Tesla/OpenAI,AI 教育与创业
  • Jim Fan(范麟熙) — NVIDIA 高级研究科学家,具身智能
  • François Chollet — Keras 创始人,AGI 评估(ARC)
  • Ilya Sutskever — SSI 联合创始人,前 OpenAI 首席科学家
  • Fei-Fei Li(李飞飞) — 斯坦福 HAI,World Labs 创始人

独立 KOL / 分析师

  • 宝玉(@dotey) — AI 资讯翻译与深度解读
  • Simon Willison — LLM 工具链与应用实践
  • Swyx(shawn@wang) — Latent Space 主理人,AI 工程趋势

适用场景

  • AI 产品经理每日情报采集
  • 技术团队 AI 动态周报素材
  • 个人 AI 学习与信息追踪
  • 配合 cron 定时任务自动推送到 Telegram/WhatsApp/Slack

Comments

Loading comments...