CCTV News Fetcher
v1.0.0Fetch and parse news highlights from CCTV News Broadcast (Xinwen Lianbo) for a given date.
⭐ 11· 9.5k·80 current·84 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included artifacts: the JS crawler targets CCTV/Xinwen Lianbo pages and parses titles/content. Declared dependency (node-html-parser) and the presence of a crawler script are proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs running the included script (bun/node) with a date argument, parsing its JSON output, and summarizing results. The runtime instructions do not ask the agent to read unrelated files, environment variables, or secrets. The script only performs HTTP GETs to CCTV domains and parses returned HTML. Minor note: SKILL.md emphasizes using bun but the command in places only shows bun (node should also work if environment supports fetch).
Install Mechanism
This is an instruction-only skill (no install spec). The repository includes package.json/package-lock but nothing will be automatically installed; the environment must already have bun or a compatible Node with fetch and node-html-parser installed. No third‑party download URLs or extract steps are present.
Credentials
The skill requests no environment variables or credentials. The crawler uses hard-coded HTTP headers (including a Cookie value) but no secrets from the runtime environment. Outbound network access to CCTV domains is required and expected for the purpose.
Persistence & Privilege
always is false and the skill is user-invocable; it does not attempt to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not exceptional here and is not combined with broad credential access.
Assessment
This skill appears to do what it claims: it runs a local Node script that fetches and parses CCTV pages and prints JSON. Before installing/using it: (1) ensure you have bun or a Node runtime with global fetch and install node-html-parser (package.json is present but nothing is auto-installed), (2) be aware the agent will make outbound HTTP requests to CCTV domains (network egress), so run it in an environment where that is acceptable, (3) the script includes a hard-coded Cookie header (not a secret) and verbose request headers—harmless but unnecessary, and (4) if you require stricter isolation, run the script in a sandbox or ephemeral environment. No environment variables or credentials are requested and there are no other obvious red flags.Like a lobster shell, security has layers — review code before you run it.
latestvk977q311rkgb7txx5341zfw20h80deck
License
MIT-0
Free to use, modify, and redistribute. No attribution required.