每日热榜

This skill appears to implement a local aggregator and stores data under /root/.openclaw/workspace/skills/daily-hot-news/data. Before installing, check these things: 1) Review the code (especially deploy.sh if present, storage.py, api_client.py, and any code that performs HTTP POSTs) to see how webhooks/tokens are used and where they are stored. 2) Confirm and supply the required environment variables (DAILY_HOT_API_URL, DAILY_HOT_DATA_DIR, etc.) — note the registry metadata does not declare them. 3) Investigate the deploy instructions: SKILL.md references a separate 'daily-hot-api' directory and PM2; ensure you trust the deploy script and that it doesn't run unexpected commands. 4) Install Python dependencies in an isolated environment (virtualenv) and inspect what the code does before running as root. 5) If you plan to enable scheduled pushes (飞书), explicitly determine which credentials or webhooks the skill needs and store them securely; don't rely on implicit defaults. If you want, provide the contents of deploy.sh and config.py so I can flag any specific risky operations (writing cron entries, executing arbitrary shell commands, or transmitting secrets to third-party endpoints).