Security checks across malware telemetry and agentic risk
This skill does summarize fund news, but it also automatically saves, sends, commits, pulls, and pushes reports with broad GitHub side effects that users should review carefully.
Install only if you explicitly want an unattended daily market report that may be sent to Telegram, saved under /root/clawd/obsidian-vault, and pushed to a GitHub repository. Before enabling it, confirm the Telegram recipient, the repository origin, credentials, branch, cron disable path, and change the git sync to stage only the generated report or require approval before pushing.
# 先提交本地更改
logger.info("正在提交本地更改...")
subprocess.run(["git", "add", "-A"], check=False)
commit_result = subprocess.run(
["git", "commit", "-m", f"Update fund report {today_str}"],
capture_output=True, text=True# 先提交本地更改
logger.info("正在提交本地更改...")
subprocess.run(["git", "add", "-A"], check=False)
commit_result = subprocess.run(
["git", "commit", "-m", f"Update fund report {today_str}"],
capture_output=True, text=True
)# 获取远程更新 (使用 merge 策略)
logger.info("正在同步 GitHub 仓库...")
pull_result = subprocess.run(
["git", "pull", "origin", "master", "--no-rebase"],
capture_output=True, text=True
)logger.warning(f"拉取远程更新失败: {pull_result.stderr}")
# 推送
push_result = subprocess.run(
["git", "push", "origin", "master"],
capture_output=True, text=True
)66/66 vendors flagged this skill as clean.