热点新闻
v0.1.3用于拉取并展示最新热点内容（接口为 https://hotspot.api4claw.com/hotspots/latest?timestamp=$TIME_STEMP，返回 JSON 数组）。按模型预估点击率生成 Top 条目（不使用原始热度排序）。默认会提示用户创建定时任务（不自动执行），在用户确认后提供 c...
⭐ 0· 102·0 current·0 all-time
by@xltang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim to fetch and present latest hotspots from a single API. The SKILL.md requires only network access to https://hotspot.api4claw.com and the web_fetch tool to GET /hotspots/latest with a timestamp. No unrelated binaries, credentials, or config paths are requested—this is proportionate to the stated purpose.
Instruction Scope
Runtime instructions are narrowly scoped: generate a minute-precision timestamp, call the declared endpoint via web_fetch (extractMode: text), parse the returned JSON, rank items by model-estimated CTR, and format outputs per the Output Rules. The skill explicitly forbids caching, fabricating data, or reading unrelated system state. It also requires explicit user approval before creating cron jobs.
Install Mechanism
No install spec or code files are present (instruction-only). Nothing is downloaded or written to disk by default, which minimizes install risk.
Credentials
The skill does not request environment variables, credentials, or access to configuration paths. The fixed base URL is declared in the SKILL.md. There are no unexplained secrets or broad credential requests.
Persistence & Privilege
always:false and the skill is not force-included. The skill recommends creating a scheduled cron job but requires user confirmation; creating that cron would grant scheduled execution of the skill (normal for scheduled consumers). Users should be aware that enabling the optional cron will cause recurring external network calls to the listed endpoint.
Assessment
This skill is internally consistent: it only makes live GET requests to https://hotspot.api4claw.com and summarizes results—no credentials, installs, or extra system access are required. Before installing, confirm you trust the hotspot.api4claw.com service (privacy/content concerns) and be aware that if you accept the optional cron setup the agent will run the fetch on the schedule you approve. Also verify your OpenClaw runtime has the web_fetch tool available and that any automatic substitutions (channel/user ID) in cron messages behave as you expect.Like a lobster shell, security has layers — review code before you run it.
latestvk97ejxq7wsxe13g1604hxt3q9s84h6b2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.