my-daily-news
v1.0.0Fetch top news from Baidu, Google, and other sources daily.
⭐ 1· 5k·43 current·45 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to fetch top news/trends and includes a Python script that uses requests, BeautifulSoup, and feedparser to scrape Baidu and read Google Trends RSS. The declared requirement (python and PYTHONIOENCODING) is appropriate and proportionate to that purpose.
Instruction Scope
SKILL.md instructs running the included Python script and installing requirements. The script only performs outbound HTTP requests to Baidu and Google Trends RSS and formats the results. It does not read local config files, environment secrets, or other system state beyond setting UTF-8 output.
Install Mechanism
There is no packaged installer; SKILL.md asks the user to pip install requirements.txt. Installing packages from PyPI is expected for a Python script but will cause network downloads and write packages to the environment—recommend using a virtualenv or sandbox.
Credentials
The only required environment entry is PYTHONIOENCODING=utf-8 (non-sensitive). No credentials, tokens, or config paths are requested. The script does not access other environment variables.
Persistence & Privilege
The skill does not request persistent or elevated privileges, is not always-enabled, and does not modify other skills or system-wide settings.
Assessment
This skill is internally coherent: it needs Python and will install three common PyPI packages, then make HTTP requests to Baidu and Google Trends to produce a short list of trending items. Before installing, consider: (1) run pip install inside a virtual environment or sandbox to avoid contaminating your system Python; (2) the script performs outbound network calls—ensure your environment policy permits access to the target domains; (3) web scraping can break if site structure changes and may conflict with site terms of service; (4) the script prints local/server time but labels it 'Beijing time'—expect possible timezone mismatches. No credentials are requested and there are no red flags in the code, but always review and run third-party code in an isolated environment if you have security concerns.Like a lobster shell, security has layers — review code before you run it.
latestvk979cr1qawjpjcgvxn4mhtt7qn80t4a3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython
EnvPYTHONIOENCODING=utf-8