Trump Tracker

川普动态实时监控及“不靠谱”预测模型 (Python 版)。

Security Scan

The skill's code, instructions, and dependencies are consistent with a news-monitoring + sentiment-based predictor for Trump; nothing in the package requests unrelated credentials or performs obvious exfiltration, though there are a few minor implementation risks to be aware of.

Purpose & Capability

Name/description (real-time RSS monitoring and a TextBlob-based 'unreliable' predictor) match the included scripts, README, requirements, and runtime instructions. The listed dependencies (requests, feedparser, beautifulsoup4, textblob) are appropriate for the stated functionality.

Instruction Scope

SKILL.md and README only instruct installing Python deps and running scripts in the skill folder; the runtime instructions do not request unrelated files, env vars, or external endpoints beyond RSS feeds. Note: the monitor may read a local cache file logs/live_news_cache.json if RSS fetch fails—this is contained to the skill directory but worth noting.

Install Mechanism

There is no external install spec in the registry; the bundle contains an install_deps.py helper that runs pip install -r requirements.txt and calls textblob.download_corpora. This is a standard, expected approach for Python projects. The installer will reach out to the network to fetch packages and corpora (normal but requires caution).

Credentials

The skill requests no environment variables, credentials, or config paths. All network access is to public RSS feeds and PyPI/corpora download; no secrets or unrelated service tokens are requested.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and has no privileged persistence. It creates/uses a logs directory inside its own scripts folder only.

Assessment

This package appears coherent for its stated purpose. Consider these precautions before running: 1) Run install_deps.py and the scripts inside an isolated Python environment (virtualenv/container) because pip installs and TextBlob corpus downloads execute network actions and Python package code. 2) The HTTP requests in scripts use verify=False (SSL verification disabled) which increases risk of man-in-the-middle tampering of fetched RSS content; avoid running on highly sensitive networks or adjust the code to enable certificate verification. 3) The monitor writes/reads a logs/live_news_cache.json file inside the skill folder — review any cached data before sharing. 4) Inspect the requirements and ensure you trust the PyPI packages being installed. If you want higher assurance, run the scripts in a disposable environment and/or review/modify the verify=False line to verify HTTPS certificates.

川普动态监控助手 (Trump Dynamic Tracker)

版本 / Version: 1.0.0

核心能力 / Core Capabilities:

1. 实时动态捕捉 / Real-time Dynamics: 自动抓取全球新闻 RSS 关于川普的最新言论/行动。 (Auto-capture latest Trump news/actions via global RSS feeds.)
2. 不靠谱模型预测 / Unreliable Model Prediction: 基于 TextBlob 的言论执行概率与市场冲击预测。 (Sentiment-based execution probability and market impact prediction.)

🛠️ 包含工具 / Tools Included

1. 动态抓取脚本 / News Monitor (scripts/trump_monitor.py)

使用 feedparser 监控新闻流。 (Monitors news streams using feedparser.)

2. 川普不靠谱预测模型 / Unreliable Predictor (scripts/trump_predictor.py)

Bilingual Prediction output.

用法 / Usage: // turbo

python e:\py\.agent\skills\trump-tracker\scripts\trump_predictor.py

📦 依赖 / Dependencies

• requests, feedparser, beautifulsoup4, textblob