Daily News Skill

自定义新闻类型，自动从互联网抓取最新消息，用语音播报。支持科技/财经/体育/娱乐等多个类别，定时发送。

Security Scan

The skill's files and instructions match a news-broadcasting purpose (fetch news, summarize, produce TTS and send via Feishu); nothing looks like intentional misdirection, but there are packaging inconsistencies and an external sibling dependency you should inspect before use.

Purpose & Capability

Name/description (news fetch, summary, TTS, scheduled broadcast) align with what the scripts do: search via Tavily (optional) or simulate web search, build summaries, and invoke a Feishu voice sender. Required tools (curl, python3, jq, ffmpeg) and env vars (Feishu credentials, NoizAPI, optional Tavily key) are consistent with those capabilities.

Instruction Scope

SKILL.md and the main script keep to the stated scope (reading news_config.conf, fetching news, producing text, and sending voice/text). However the script attempts to call a sibling feishu-voice-skill (../feishu-voice-skill/scripts/send_voice.sh) if present — that is an external/adjacent component outside this skill's bundle and could execute arbitrary code with the same environment. The script also contains a simulated web_search fallback rather than performing live scraping unless Tavily API is provided.

Install Mechanism

No install spec — instruction-only with included shell scripts. This minimizes install-time risk (no remote arbitrary downloads). Required system binaries are standard (curl, python3, jq, ffmpeg).

Credentials

The skill asks for FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_CHAT_ID and NOIZ_API_KEY (and optionally TAVILY_API_KEY). These are sensitive but appear necessary for sending messages and producing TTS. One inconsistency: the registry summary at the top of the evaluation said "Required env vars: none" while clawhub.yaml and SKILL.md do declare these env vars — this mismatch is a packaging/documentation issue you should notice before installing.

Persistence & Privilege

No always:true privilege; the skill is user-invocable and allowed to run autonomously by default (platform normal). The skill does not request to modify other skills or system-wide settings. The main risk is runtime: if a sibling feishu-voice-skill script exists it will be executed.

Assessment

This skill appears to do what it says, but check a few things before use: 1) The script requires Feishu credentials and a NoizAI key — these are sensitive; create a least-privilege Feishu app and use a chat/account you control. 2) Inspect the sibling script ../feishu-voice-skill/scripts/send_voice.sh if present — the main script will execute it and it could run arbitrary actions with your environment. 3) The package/registry metadata is inconsistent about required env vars (documentation mismatch) — verify env var needs yourself. 4) If you plan to run it on a schedule, use an account/VM/container with limited access and confirm absolute paths in crontab. 5) If you do not want external network calls, do not set TAVILY_API_KEY and review the script's network behavior (it posts to https://api.tavily.com/search when the key is set). If you want further review, provide the feishu-voice-skill send_voice.sh and any fetch/summarize helper scripts referenced in SKILL.md.

Daily News Skill - 每日新闻播报技能

自定义新闻类型，自动抓取最新消息，语音播报！

🎯 功能特点

• ✅ 自定义类别：科技/财经/体育/娱乐/国际等
• ✅ 自动抓取：从互联网获取最新新闻
• ✅ 语音播报：用 NoizAI TTS 生成语音
• ✅ 定时发送：每天早上自动推送
• ✅ 多源聚合：支持多个新闻源
• ✅ 智能摘要：AI 总结新闻要点

📋 使用场景

• 🌅 晨间播报：每天早上 8 点听新闻
• 💼 财经追踪：关注股市/行业动态
• 🎮 娱乐资讯：游戏/电影/音乐新闻
• 🌍 国际时事：全球重要事件
• 🏀 体育快讯：比赛结果/转会消息

🔧 前置要求

1. Feishu 应用配置

同 Feishu Voice Skill

2. 新闻源 API

• Tavily API（推荐）
• 或免费新闻 RSS

3. 系统依赖

# 安装 jq
yum install -y jq

🚀 快速开始

步骤 1：配置环境变量

export FEISHU_APP_ID="cli_xxx"
export FEISHU_APP_SECRET="xxx"
export FEISHU_CHAT_ID="oc_xxx"
export NOIZ_API_KEY="xxx"
export TAVILY_API_KEY="tvly_xxx"  # 可选

步骤 2：定制新闻类别

编辑 news_config.conf：

# 格式：类别名称，关键词，新闻数量
科技，AI 人工智能 机器学习，5
财经，股票 股市 金融，3
体育，篮球 足球 NBA，2

步骤 3：运行播报

# 手动运行一次
bash scripts/news_broadcast.sh

# 加入定时任务（每天早上 8 点）
crontab -e
0 8 * * * bash /path/to/news_broadcast.sh

💡 使用示例

1. 只关注科技新闻

cat > news_config.conf << EOF
科技，AI 人工智能 芯片 互联网，10
EOF

bash scripts/news_broadcast.sh

2. 财经 + 体育

cat > news_config.conf << EOF
财经，股票 股市 基金，5
体育，NBA 足球 网球，3
EOF

bash scripts/news_broadcast.sh

3. 定制个性化播报

cat > news_config.conf << EOF
科技，OpenAI Google 苹果，5
财经，A 股 美股 比特币，3
娱乐，电影 音乐 游戏，2
EOF

bash scripts/news_broadcast.sh

📖 命令参数

bash scripts/news_broadcast.sh [选项]

选项:
  -c, --config <file>     配置文件路径
  -o, --output <type>     输出格式（voice/text/both）
  --limit <num>           每类新闻数量上限
  --no-voice              只输出文字，不生成语音
  -h, --help              显示帮助

🎤 播报格式

司幼会用温暖的声音播报：

"主人早上好～ 今天是 3 月 7 日，星期六。司幼给您播报今天的新闻～

【科技】

1. OpenAI 发布新模型...
2. 苹果推出新产品...

【财经】

1. A 股今日上涨...
2. 比特币突破...

播报完毕～ 祝主人一天好心情！🌸"

⚙️ 高级配置

1. 自定义播报时间

# 编辑 config.sh
BROADCAST_TIME="08:00"  # 早上 8 点

2. 自定义播报风格

# 正式风格
BROADCAST_STYLE="formal"

# 轻松风格
BROADCAST_STYLE="casual"

# 可爱风格（司幼默认）
BROADCAST_STYLE="cute"

3. 新闻源配置

# 使用 Tavily API
NEWS_SOURCE="tavily"

# 使用 RSS
NEWS_SOURCE="rss"

# 使用搜索引擎
NEWS_SOURCE="search"

📦 文件结构

daily-news-skill/
├── SKILL.md
├── README.md
├── reference.md
├── scripts/
│   ├── news_broadcast.sh    # 主脚本
│   ├── fetch_news.sh        # 抓取新闻
│   ├── summarize.sh         # 摘要生成
│   └── config.sh            # 配置文件
├── examples/
│   ├── news_config.conf     # 配置示例
│   └── crontab.txt          # 定时任务示例
└── news_config.conf         # 用户配置

💰 商业授权

• 个人使用：免费
• 商业使用：请联系作者获取授权

---

Made with ❤️ by 司幼 (SiYou)