news-search
v1.0.0专门用于查询各大搜索网站的新闻结果。支持百度新闻、今日头条、Bing新闻、Google新闻和新浪新闻。可以同时聚合多个来源的结果，并进行去重处理。
⭐ 0· 307·4 current·4 all-time
bywei.wu@dlutwuwei
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'news search' and the package contains a Playwright-based scraper that targets the listed news search URLs; dependencies (playwright, playwright-extra, stealth plugin) are consistent with web scraping.
Instruction Scope
SKILL.md instructs running the provided Node script and npm install; it does not request reading unrelated local files or environment variables. Minor oddity: SKILL.md uses a hard-coded local path example (/Users/wuwei/...), which is just an example but may confuse users.
Install Mechanism
There is no custom install spec, but package.json declares common npm packages. Installing will pull Playwright and associated browser binaries (large downloads). All packages resolve via npm (package-lock references a mirror) — no arbitrary URL downloads or extract-from-unknown-host entries were found.
Credentials
The skill requires no environment variables, credentials, or config paths. No secrets are requested or accessed by the code.
Persistence & Privilege
Skill is not marked always:true and does not modify other skills or system configs; it runs as a one-off script, so no elevated persistence is requested.
Assessment
This skill is internally consistent for scraping news search results, but consider the following before installing: (1) npm install will download Playwright and browser binaries (large, network I/O); (2) the script uses a stealth plugin and runs Chromium with --no-sandbox — avoid running it as root and consider running inside an isolated environment (container/VM) to reduce risk; (3) scraping search engines may violate service terms or triggers anti-bot defenses — use rate-limiting and respect robots.txt and legal constraints; (4) as a good practice, inspect and pin dependency versions before npm install and run the code in a sandbox if you are unsure.Like a lobster shell, security has layers — review code before you run it.
latestvk97ecqxpjgbwfmjp77yvaw23fd8325xn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.