Daily Hot Aggregator

This package is functionally coherent with its stated purpose, but exercise caution before installing or running it: 1) Inspect and remove any hard-coded credentials (fetch_all.py contains a Weibo 'SUB' cookie). Do not run code that contains someone else's cookie — remove it or replace with your own credential or a code path that fails gracefully when not present. 2) Review wechat_push.py (and wechat_push_config.json) before adding any webhook endpoints — the skill will send data you collect to those webhooks. 3) Run in a sandbox or isolated environment first, and inspect the files it writes (hot_reports/, alert_config.json) to confirm no unexpected outbound networking beyond the listed platform endpoints. 4) If you plan to use authenticated endpoints (Weibo, Douyin, etc.), configure credentials deliberately (not in source) and prefer environment variables or a protected config file. 5) If you are not comfortable editing source, avoid installing until the author removes embedded credentials and documents how to securely provide tokens/webhooks. If you want, I can point out the exact lines that contain the hard-coded cookie and suggest a safer replacement pattern.