ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Indie Maker News

v1.0.5

独行者 Daily - 变现雷达。读对一条新闻，少走一年弯路。每天5分钟，给创业者装上商业雷达。聚焦一人公司、副业、创业变现资讯，智能分类，行动导向。用户下载即能用，无需本地部署！

⭐ 0· 51·1 current·1 all-time
by@kylnwu

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kylnwu/indie-maker-news.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Indie Maker News" (kylnwu/indie-maker-news) from ClawHub.
Skill page: https://clawhub.ai/kylnwu/indie-maker-news
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install indie-maker-news

ClawHub CLI

Package manager switcher

npx clawhub@latest install indie-maker-news
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
Name/description (news aggregator for indie makers) aligns with the included scripts: multiple fetch scripts parse public RSS feeds and a public WallStreetCN API to produce monetization-focused news. No credentials or special binaries are requested, which is proportionate to a feed aggregator.
!
Instruction Scope
SKILL.md instructs running ./scripts/aggregate.sh (which launches Python scripts). The scripts perform outbound HTTP requests to many remote RSS endpoints and to https://api-one.wallstcn.com. However README.md and AUDIT.md assert 'No external API calls' and 'Only local data sources' — that directly contradicts the actual runtime behavior. The agent instructions will cause network I/O; if a user expects purely local-only operation, that expectation is false.
✓
Install Mechanism
There is no install spec (instruction-only), and included code is executed directly. This is low-risk relative to remote installers because nothing is downloaded and executed at install time beyond the provided scripts. Scripts use only Python standard library modules (urllib, xml.etree, etc.).
✓
Credentials
The skill declares no required environment variables or credentials. The code uses only public RSS/API endpoints (the WallStreetCN endpoint appears to be unauthenticated in the scripts). No secret exfiltration or unexpected credential access is requested by the skill.
✓
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system settings. It runs on demand via the provided scripts and has no special persistent privileges.
What to consider before installing
This skill is functionally a news aggregator and the provided scripts fetch remote RSS feeds and a public WallStreetCN API — there is no credential access required. However, the README.md and AUDIT.md claim 'no external API calls' and 'only local data sources', which is inconsistent with the scripts; treat that as a red flag about author-provided claims (likely sloppy documentation, but could mislead users about privacy/networking). Before installing or running: 1) Review the fetch scripts yourself (they are plain Python) to confirm endpoints you are comfortable allowing. 2) Run the skill in a network-restricted or isolated environment if you want to audit behavior first. 3) If you need strictly local-only operation, do not run aggregate/fetch scripts because they perform outbound HTTP requests. 4) If unsure, ask the author to reconcile the README/AUDIT claims with the code (and to clarify which script is the recommended entrypoint and the intended version).

Like a lobster shell, security has layers — review code before you run it.

latestvk974g1pn5zqj8qp7j2ntch1zy185pwbw
51downloads
0stars
6versions
Updated 5h ago
v1.0.5
MIT-0
@kylnwu
latest
Download

独行者 Daily - 变现雷达（独立版）

"读对一条新闻，少走一年弯路。"

每天5分钟，给创业者、独立开发者、副业人群装上商业雷达。

用户下载即能用，无需任何本地部署！

✨ 独立运行特性

为什么选择独行者 Daily？

其他Skill独行者 Daily
需要本地部署下载即能用
技术门槛高零配置运行
环境依赖复杂独立运行

核心价值

变现导向精选：只推送与"变现"相关的资讯，每条都有行动价值

智能分类：

  • 🏆 成功案例：独立开发者变现经验
  • 💡 创业模式：SaaS、数字产品、咨询服务
  • ⚠️ 失败反思：避坑指南
  • 🔧 工具推荐：效率/营销工具

🚀 一键使用

直接运行聚合脚本：

./scripts/aggregate.sh

无需任何配置！脚本会自动：

  • 解析公开RSS源（36氪、知乎、V2EX、Hacker News）
  • 智能筛选变现相关内容
  • 输出结构化JSON数据

📡 数据源（10个可靠源）

创业投资类（4个）：

  • 36氪（创业、融资、SaaS、变现）
  • 虎嗅（商业模式、商业洞察）
  • 创业邦（创业者、融资动态）
  • 华尔街见闻（财经资讯、投资、融资）✨ 新增

开发者社区类（3个）：

  • V2EX综合（独立开发、副业、赚钱）
  • V2EX程序员（程序员话题、开源）
  • Indie Hackers（独立开发、revenue、profit）

技术前沿类（3个）：

  • Hacker News（startup、side project）
  • GitHub Trending（开源工具、效率）
  • 掘金前端（技术社区、副业）

关于B站、抖音、头条、微博等平台：

  • NewsNow已实现这些数据源获取
  • 技术复杂度较高（需API认证或特殊处理）
  • Skill保持"安全可靠、零配置"承诺
  • 后续版本将评估集成方案

安全特性：

  • ✅ 使用公开RSS/API源
  • ✅ 华尔街见闻API无需认证
  • ✅ 无需本地NewsNow部署
  • ✅ Python标准库实现，零外部依赖

智能筛选：

  • 关键词匹配：变现、创业、副业、SaaS、独立开发、赚钱等
  • 相关性评分：标题匹配权重高（10分），内容匹配（5分）
  • 只推送真正有价值的变现机会

触发词

  • /变现雷达 - 查看今日变现机会
  • /创业案例 - 学习成功/失败经验
  • /副业机会 - 发现副业变现路径

适用人群

  • 一人公司创作者
  • 副业开发者
  • 独立创业者
  • 想了解变现机会的人

脚本说明

独立版脚本

scripts/fetch-news-standalone.py：直接解析公开RSS源，无需任何本地部署

完整版（可选）

如果你已部署本地NewsNow容器，可使用scripts/fetch-news.py获取更多数据源

版本历史

v1.0.4（华尔街见闻版）

  • ✅ 新增华尔街见闻数据源（财经资讯）
  • ✅ 数据源扩充至10个
  • ✅ 集成NewsNow实现方案
  • ✅ 评估B站/抖音/头条/微博技术方案（待后续版本）

v1.0.3（完整数据源版）

  • 扩充至9个可靠数据源
  • 智能相关性评分系统 �本地NewsNow容器，可使用scripts/fetch-news.py获取更多数据源

版本历史

v1.1.0（独立运行版）

  • ✅ 重构为独立运行，无需本地NewsNow
  • ✅ 使用公开RSS源（36氪、知乎、V2EX、HN）
  • ✅ 用户下载即能用，零配置
  • ✅ Python标准库实现，无外部依赖

v1.0.0

  • 初始概念版

Comments

Loading comments...