Cls News Scraper

Extract real-time stock-positive market news from Cailian Press filtered by time, sector, and event type for catalyst identification.

Security Scan

Instruction-only skill that plausibly does what it claims (pull CLS news and extract catalysts); it requests no credentials or installs, but the SKILL.md is vague about the data source/configuration and how network access should be performed.

Purpose & Capability

The name and instructions match: the skill says it will pull CLS (Cailian Press) market news and extract catalysts. It does not declare any unrelated binaries, credentials, or system paths. Minor inconsistency: the instructions refer to a "configured endpoint/source" but the skill provides no mechanism (env vars, config paths, or install) for where that endpoint is set.

Instruction Scope

The runtime steps are limited to collecting items, normalizing fields, classifying events, filtering, and outputting rows — all within the stated purpose. However the collection step is underspecified (could be a web-scrape, API call, or other source). That vagueness gives the agent discretion to access arbitrary external endpoints unless the platform or user supplies explicit configuration or constraints.

Install Mechanism

No install spec and no code files — instruction-only. This is low-risk because nothing is written to disk by the skill itself.

Credentials

The skill requests no environment variables or credentials, which is proportionate. One caveat: if the CLS source requires an API key or authenticated access, the SKILL.md does not declare how such credentials would be provided, which is an omission but not necessarily malicious.

Persistence & Privilege

always is false (default) and the skill does not request system-wide changes or persistent installation. The agent may invoke the skill autonomously (platform default), which is expected behavior for skills.

Assessment

This skill appears coherent and low-risk, but it's underspecified. Before installing or enabling it: (1) Ask where and how the "configured endpoint/source" is provided — you should know which URL or API the agent will contact. (2) If the CLS source requires credentials, supply them only through documented, secure env/config mechanisms and verify the skill declares them. (3) Be aware the agent may perform network requests — limit or supervise autonomous runs if you do not want the agent calling external endpoints without oversight. (4) Test the skill in a controlled environment and review any outputs for sensitive data before using them in production. If you need higher assurance, request the skill author to document the exact endpoint, authentication method, and expected data format.

Use this skill to pull real-time market news from Cailian Press (CLS) and extract stock-positive catalysts.

Inputs

• Time window (default: last 1 hour)
• Sector filter (default: 新能源, 消费)
• Event filter (default: 业绩预增, 重大合同, 政策扶持)

Procedure

1. Collect latest CLS items from configured endpoint/source.
2. Normalize fields: title, summary, ticker, company, published_at, source_url.
3. Classify each item into event types.
4. Keep only matched industries and event types.
5. Output table rows for downstream scoring.

Output Schema

• ticker
• company
• catalyst
• source_url
• timestamp
• confidence