news-for-ai
v1.0.1Fetches real-time AI industry news, daily AI digests, and searches AI topics including products, models, and MCP services. Outputs structured JSON with clean...
⭐ 0· 54·0 current·0 all-time
by@sskun
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (AI news, digests, search) matches the included CLI and Python code which exclusively fetches and parses content from news.aibase.cn / aibase.cn. No unrelated credentials, binaries, or services are requested.
Instruction Scope
SKILL.md tells the agent to install Python requirements and run the bundled news_cli.py commands. The instructions and CLI behavior are limited to fetching/parsing articles and outputting JSON; they do not instruct reading other files, environment secrets, or sending data to unexpected endpoints.
Install Mechanism
There is no install spec beyond running pip install -r ${SKILL_DIR}/requirements.txt. Dependencies are standard Python libraries (requests, beautifulsoup4, urllib3) appropriate for an HTTP scraper; nothing is downloaded from untrusted URLs or written to unusual locations.
Credentials
The skill declares no required environment variables, credentials, or config paths. The code does not read env vars or request unrelated secrets, so requested access is proportionate to the stated purpose.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system settings. It runs on-demand and has no special persistence or privileged system presence.
Assessment
This skill is a scraper that queries news.aibase.cn and returns structured JSON. Before installing: (1) confirm you trust the aibase.cn source (the tool will make outbound HTTP requests to that domain); (2) be aware the SKILL.md asks you to pip install dependencies into the environment where it runs—install in a virtualenv or sandbox if you want isolation; (3) review the included news_cli.py if you need assurance it doesn't leak data elsewhere (it only performs GET requests and prints JSON to stdout); (4) if you will let the agent invoke skills autonomously and network access is sensitive in your environment, consider restricting network access or requiring manual invocation.Like a lobster shell, security has layers — review code before you run it.
latestvk97c082myem43dndt0ma69c6j183xfvp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.