Morning Briefing Generator 晨会简报生成器
v1.0.0每日早会简报生成器 — 自动聚合国内外新闻、财经资讯、行业动态,生成结构化早会简报并推送给指定用户。适用于企业高管、创业者、投资者等需要快速掌握每日要闻的场景。支持定时任务自动执行。
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The README and SECURITY.md reference a scripts/generate-briefing.ps1 implementation and a code-based workflow, but the published bundle contains only documentation files (SKILL.md, README*, SECURITY.md) and no scripts. The skill advertises 'push to specified users' and cron scheduling but declares no credentials, endpoints, or mechanism for pushing notifications. This inconsistency between claimed capabilities (scripted generation and push) and the actual package contents is unexpected.
Instruction Scope
SKILL.md's metadata permits network access to wttr.in and api.allorigins.win and allows reading/writing the workspace; that fits news/weather fetching. However SKILL.md also repeatedly claims 'no external data transmission' and 'no credentials', which is ambiguous: fetching web pages is external I/O (acceptable for news), but the unspecified 'push' step could require transmitting generated content or credentials. The instructions are vague about where/how push happens and what data (workspace contents) might be sent.
Install Mechanism
No install spec and no code files are present, so there is no installer or remote download to evaluate — this is low install risk. However the documentation's references to a script that isn't included are misleading.
Credentials
The skill declares no required environment variables or credentials, which is proportionate to an offline/local generator that only writes to workspace. But because the skill promises scheduled generation and 'push' to users, the absence of any declared credential or config for notification services (email/Slack/WeChat) is a mismatch that should be resolved before trusting automated pushes.
Persistence & Privilege
The skill is not marked always:true and uses default invocation rules. It requests only optional workspace read/write and limited network access in metadata. There is no indication the package will force persistent system-level changes.
What to consider before installing
Do not enable automated scheduling or allow the skill to push content until the missing pieces are clarified. Specific checks to request from the publisher: (1) supply the actual generate script(s) referenced in README/SECURITY (scripts/generate-briefing.ps1) so you can review them; (2) explain exactly how "push to specified users" works and list endpoints, required credentials, or integrations (email, Slack, webhook, etc.); (3) confirm the exact network endpoints the skill will call at runtime and whether any workspace content could be transmitted to those endpoints; (4) verify the origin/identity of the publisher and ask why the Security audit and script are bundled only as claims in docs but not present in the package. If you must test it, run it in a restricted sandbox with no real credentials and with workspace contents you consider non-sensitive. If the author cannot provide the missing script/source or a clear explanation of push mechanics, treat the package as untrusted.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🌅 Clawdis
latest
🌅 Daily Briefing — 每日早会简报
自动生成结构化早会简报,支持定时推送。
功能特性
- 📰 多维度新闻聚合:国内要闻、国际动态、财经资讯、科技行业、政策新规
- 🎯 行动建议:根据当日要闻生成可执行建议
- 📁 文件输出:Markdown 格式简报保存至 workspace
- ⏰ 定时任务:支持 cron 定时生成与推送
- 🔒 安全合规:无外部数据外传,无凭证请求
使用方式
快速生成今日简报
生成今日早会简报
指定日期
生成 [日期] 的早会简报,格式如 2026-04-12
设置每日定时早会
每天早上 8:00 生成早会简报并推送给我
输出示例
# 🌅 每日早会简报(2026年4月12日)
## 📢 今日重点资讯
### 国内重要新闻
- [新闻标题] [摘要] [来源链接]
### 国际热点事件
- [...]
### 财经要闻
- [...]
### 科技行业动态
- [...]
### 政策新规
- [...]
## 🎯 今日行动建议
1. [部门]: [建议内容]
2. [...]
安全说明
- 🔒 本地处理:所有数据在本地处理,无外部传输
- 🔒 无凭证:无需 API Key,无凭证请求
- 🔒 只读网络:仅获取天气信息和网页内容
- 🔒 可审计:所有操作记录在 workspace 日志中
技术架构
- 纯文本生成,无外部依赖
- 支持 OpenClaw cron 定时任务
- 输出为标准 Markdown 格式
更新日志
1.0.0 (2026-04-13)
- 初始版本发布
- 支持国内/国际新闻、财经、科技、政策分类
- 支持定时任务配置
- 符合 ClawHub 安全标准
Comments
Loading comments...
