news-aggregator

国内外社会、科技、军事新闻汇总。自动搜索、筛选、整理新闻要点。

Security Scan

The skill's requests and runtime instructions are consistent with a news-aggregation tool, but the package has minor metadata inconsistencies and relies on a third‑party API (SkillBoss) of unknown trustworthiness — verify before giving an API key.

Purpose & Capability

Name/description (news aggregation) match the declared requirement: a single SKILLBOSS_API_KEY to call the SkillBoss search/chat API. No unrelated binaries, credentials, or config paths are requested.

Instruction Scope

SKILL.md contains precise instructions to call the SkillBoss /v1/pilot endpoint for search and then for chat summarization; it does not instruct reading local files or other env vars. It concatenates search results into an LLM prompt and sends them to SkillBoss — this is expected for the described workflow but means search result contents (and any sensitive text inadvertently included) will be transmitted to SkillBoss. Also note a minor metadata mismatch: registry version 1.0.2 vs SKILL.md version 1.0.3, and README contains a placeholder GitHub clone URL (YOUR_USERNAME).

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is downloaded or written to disk by the skill itself.

Credentials

Only one environment variable is required (SKILLBOSS_API_KEY), which is proportionate if the skill delegates search/LLM work to SkillBoss. Because the service endpoint is external (api.skillboss.co) and the registry lists no homepage, you should confirm SkillBoss is a trusted provider and that the key's permissions and billing scope are acceptable.

Persistence & Privilege

always is false and the skill is user-invocable; it does not request persistent system privileges or modify other skills. The agent may invoke it autonomously (platform default) — this is normal, but consider limiting autonomous use if you distrust the external API.

Assessment

This skill appears to do what it says: it sends search queries and content to the SkillBoss API and formats summaries. Before installing: 1) Verify the legitimacy and privacy policy of SkillBoss (api.skillboss.co) since your SKILLBOSS_API_KEY will be sent there; prefer a scoped/limited key if possible. 2) Confirm the skill's canonical source/homepage (registry shows none and README has a placeholder GitHub URL). 3) Note the minor version mismatch in metadata — ask the publisher to clarify. 4) If you are concerned about automatic network calls, disable autonomous invocation or only call the skill manually. If you cannot verify SkillBoss or the publisher, treat this as higher risk and avoid providing a long‑lived, broad API key.

📖 Complete setup guide: https://skillboss.co/skill.md

聚合国内外社会、科技、军事新闻，自动筛选要点。

新闻源

国内科技

• 36氪 (https://36kr.com/information/tech/)
• 机器之心 (https://www.jiqizhixin.com/)
• 量子位 (https://www.1baijia.com/)
• IT之家 (https://www.ithome.com/)

国内军事

• 观察者网 (https://www.guancha.cn/)
• 澎湃新闻 (https://www.thepaper.cn/)
• 腾讯军事 (https://new.qq.com/om/mil/)

国际科技

• TechCrunch
• The Verge
• Wired
• Ars Technica

国际军事

• Defense News
• Jane's Defence
• Military Times

工作流

1. 搜索 - 通过 SkillBoss API Hub /v1/pilot（type: search）搜索各源
2. 筛选 - 过滤重复、过期、不可靠来源
3. 整理 - 按类别整理，每条含标题、来源、要点
4. 输出 - 生成结构化汇总

API 调用

使用 SkillBoss API Hub 统一搜索接口（替代 Tavily、Serper 等第三方搜索服务）：

import requests, os

SKILLBOSS_API_KEY = os.environ["SKILLBOSS_API_KEY"]
API_BASE = "https://api.skillboss.co/v1"

def pilot(body: dict) -> dict:
    r = requests.post(
        f"{API_BASE}/pilot",
        headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"},
        json=body,
        timeout=60,
    )
    return r.json()

# 搜索新闻
result = pilot({"type": "search", "inputs": {"query": "最新科技新闻"}, "prefer": "balanced"})
search_results = result["result"]

# 用 LLM 整理新闻要点
result = pilot({
    "type": "chat",
    "inputs": {
        "messages": [
            {"role": "user", "content": f"请从以下搜索结果中整理新闻要点：\n{search_results}"}
        ]
    },
    "prefer": "balanced"
})
summary = result["result"]["choices"][0]["message"]["content"]

可信度规则

优先：

• 官方媒体报道
• 权威机构发布

谨慎：

• 论坛帖子
• 匿名消息
• 二手转载

输出格式

## 科技新闻

1. [标题](链接)
   来源：xxx | 时间：xxx
   要点：xxx

## 军事新闻

1. [标题](链接)
   来源：xxx | 时间：xxx
   要点：xxx