Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

每日简报生成器

v1.0.0

每日简报生成器。自动聚合多个信息源(RSS、网页、Tavily搜索),生成结构化每日简报,支持定时推送。当用户需要:生成每日行业简报、汇总多渠道资讯、制作早报/晚报、定时推送简报给团队时使用此技能。

0· 90·0 current·0 all-time
byxuyongliang@xuyongliang-eccom

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for xuyongliang-eccom/daily-briefing-generator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "每日简报生成器" (xuyongliang-eccom/daily-briefing-generator) from ClawHub.
Skill page: https://clawhub.ai/xuyongliang-eccom/daily-briefing-generator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install daily-briefing-generator

ClawHub CLI

Package manager switcher

npx clawhub@latest install daily-briefing-generator
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The description and SKILL.md claim multi-source aggregation (RSS, webpage scraping, Tavily) and scheduled push to enterprise channels, but the repository only contains scripts/generate_briefing.py which calls a Tavily search helper. There is no RSS parsing or web-scraping code, and the referenced scripts/schedule_briefing.py is not included. Metadata declares no required env vars, yet the code expects TAVILY_API_KEY. These mismatches indicate the implementation does not match the claimed purpose.
!
Instruction Scope
SKILL.md instructs users to subscribe RSS via feeds.txt, run generate_briefing.py with --rss, and use schedule_briefing.py to set up cron-like pushes to WeCom/Feishu/DingTalk. The available script does not implement RSS handling or any push/scheduling functionality — it only queries Tavily and writes output. The instructions therefore grant broader capabilities than the code actually performs, which is misleading and may cause unexpected behavior if users follow them.
Install Mechanism
There is no install spec (instruction-only plus one script) — low friction and lower disk-write risk. The script attempts to import a third-party 'tavily' package; if missing it returns an instruction to 'pip install tavily-python'. The skill does not include guidance or pinned dependency info for that package. Requiring users to install an unvetted package is a modest risk and should be clarified.
!
Credentials
Metadata declares no required environment variables, but generate_briefing.py reads TAVILY_API_KEY from the environment to call Tavily. Requesting a single API key would be reasonable for Tavily integration, but the fact it is not declared in the skill metadata is an inconsistency that should be corrected. No other env vars are accessed.
Persistence & Privilege
The skill does not request persistent presence (always: false), does not modify agent/system configuration, and does not declare any special config paths. No elevated persistence privileges are requested.
What to consider before installing
This skill's docs promise RSS/web scraping and scheduled push features, but the shipped code only performs Tavily searches and expects a TAVILY_API_KEY (not declared in metadata). Before installing or running: 1) Ask the publisher for the missing schedule_briefing.py and any RSS/web-scraping code, or for an explanation why those features are documented but absent. 2) Require the author to declare TAVILY_API_KEY in the skill metadata and document exactly how the Tavily client is used (network endpoints, scopes). 3) Inspect the 'tavily' package on PyPI (or vendor) before running 'pip install'—avoid installing unknown packages on production systems. 4) Run the script in an isolated/sandbox environment and review network activity if you decide to test it. 5) If you cannot obtain clarification, do not grant this skill access to production data or credentials. Providing the missing files or corrected metadata would increase confidence that the skill is coherent.

Like a lobster shell, security has layers — review code before you run it.

automationvk97cf8krns4f74necxwhhs1w7x83nmrbbriefingvk97cf8krns4f74necxwhhs1w7x83nmrbdailyvk97cf8krns4f74necxwhhs1w7x83nmrblatestvk97cf8krns4f74necxwhhs1w7x83nmrbnewsvk97cf8krns4f74necxwhhs1w7x83nmrb
90downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Daily Briefing Generator

每日简报生成器。聚合多源资讯,生成结构化每日简报并推送。

核心能力

  1. 多源聚合 — RSS订阅、网页抓取、Tavily搜索
  2. 内容去重 — 智能合并相似内容
  3. 结构化输出 — 按行业/主题分类的简报格式
  4. 定时推送 — 每日定时推送到企业微信/飞书/钉钉

快速开始

生成今日简报

python3 scripts/generate_briefing.py \
  --sources "AI科技,电商,政策" \
  --max-items 10 \
  --output ./daily_briefing.md

订阅 RSS 并生成简报

python3 scripts/generate_briefing.py \
  --rss ./feeds.txt \
  --output ./daily.md

创建每日定时推送

python3 scripts/schedule_briefing.py \
  --sources "AI科技" \
  --schedule "0 8 * * *" \
  --channel wecom \
  --timezone "Asia/Shanghai"

脚本说明

scripts/generate_briefing.py

生成每日简报。

python3 scripts/generate_briefing.py \
  --sources "<关键词1,关键词2>" \
  --max-items <数量> \
  --output <文件> \
  [--rss <rss文件路径>]

参数:

  • --sources: 逗号分隔的信息源关键词
  • --max-items: 每类最大条目数
  • --output: 输出文件路径
  • --rss: RSS订阅文件(每行一个URL)

scripts/schedule_briefing.py

创建每日简报定时推送任务。

python3 scripts/schedule_briefing.py \
  --sources "<关键词>" \
  --schedule "<cron>" \
  --channel <wecom|feishu|ddingtalk> \
  [--timezone <时区>]

输出格式

# 每日简报 — YYYY-MM-DD

## 今日要点
- 概要1
- 概要2

## 行业动态
### AI / 科技
1. [标题](链接) — 摘要
2. ...

### 电商 / 零售
1. ...

## 政策风向
1. ...

## 本周关注
1. ...

---
*由 daily-briefing-generator 生成 | YYYY-MM-DD*

推荐 RSS 订阅配置

feeds.txt 中每行一个 RSS 地址,例如:

https://feeds.example.com/tech
https://feeds.example.com/ecommerce

Comments

Loading comments...