ZAKER新闻检索-news search
v1.0.7基于ZAKER权威资讯库进行关键词新闻检索，支持指定时间范围（30天内）。Use when the user asks about 搜索新闻, 某事件新闻, 某人物新闻, 某关键词相关新闻, 查新闻, 新闻检索, 相关新闻, 某时间段新闻.
⭐ 1· 110·0 current·0 all-time
byZAKER@zaker-coder
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description state a ZAKER keyword news search and the files/instructions implement exactly that: a public HTTP GET to https://skills.myzaker.com/api/v1/article/search with keyword and optional date filters. Required binaries, env vars, and config paths are none, which matches the stated purpose.
Instruction Scope
SKILL.md and the scripts instruct the agent to send user search keywords (and optional dates) to the specified external API and format the returned articles. This is expected for a remote-news-search skill, but it does mean user queries will be transmitted to skills.myzaker.com — the documentation claims a 10s timeout, but the provided Python and shell examples do not set a timeout (minor inconsistency). The skill does not instruct reading local files, environment secrets, or other system state.
Install Mechanism
No install spec; this is instruction-only with two small example scripts. Nothing is downloaded or written during an install phase, and no third-party packages beyond typical requests/jq usage are required. Low install surface.
Credentials
The skill requests no environment variables, credentials, or config paths. The only external interaction is to the documented API endpoint. This is proportionate to a news-search capability.
Persistence & Privilege
always is false (not force-included). The skill does not request persistent system changes, modify other skills, or claim elevated privileges. It can be invoked by the agent in normal fashion.
Assessment
This skill appears to do what it says: send keyword (and optional date) queries to https://skills.myzaker.com and return articles. Before installing, consider: (1) queries (search terms and date ranges) will be transmitted to that external domain — don't send sensitive or private data; (2) verify you trust the skills.myzaker.com domain or the publisher (there's no homepage/official source listed); (3) SKILL.md claims a 10s timeout, but the example Python/curl snippets do not set timeouts — if you run networked code, consider enforcing a timeout and error handling; (4) the skill requires no credentials, so there's no secret-exfiltration flag in the manifest. If you need stronger assurance, request the publisher's privacy/retention policy or host verification (is this an official ZAKER endpoint) or run the example code in a sandbox and inspect traffic first.Like a lobster shell, security has layers — review code before you run it.
latestvk974khx8rrht54nmft21nwym7x84gazq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.