时事日报分析
v1.0.1An AI-assisted international news reporting tool that helps generate professional daily reports through structured workflows and multi-source verification fr...
⭐ 0· 108·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily news reporting, multi-source verification, PDF generation) match the files provided: a non-scraping news_collector library, a Markdown→PDF generator, templates, and guidance for an AI agent to perform web searches. Nothing in the bundle requires unrelated capabilities (no cloud credentials, no unexpected binaries).
Instruction Scope
SKILL.md explicitly delegates web searches to the AI agent and instructs collecting 6–10 sources and cross-referencing them; the included Python scripts do not perform web requests. This is coherent, but it means the runtime security/privateness depends on the AI platform's web-search/browsing tool (the skill itself will not fetch web content).
Install Mechanism
No install spec is included (instruction-only skill), so nothing is automatically downloaded or executed. README suggests a single dependency (reportlab) to be installed via pip — proportionate. One portability note: generate_pdf.py registers Windows font files (C:/Windows/Fonts/...), which will fail or require adjustment on non-Windows systems; this is a usability/compatibility issue, not a security red flag.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The code does not read secrets or external configs. This is appropriate for its stated purpose.
Persistence & Privilege
always:false and no install-time persistent agents or self-enabling behavior. The scripts write local PDF output (path controlled by arguments) but do not modify other skills or system-wide configs. Autonomous invocation by the agent is platform-default and not specific to this skill.
Assessment
This skill appears to be what it claims: a toolkit for an AI agent to organize search results and produce PDFs. Before installing: 1) Ensure the AI agent or platform you pair with has trusted web-search/browsing tools, since those tools will perform the network collection step (the skill itself does not fetch web pages). 2) Install reportlab in the environment so PDF generation works. 3) Update the font registration in generate_pdf.py if you run on non-Windows systems (hardcoded C:/Windows/Fonts paths). 4) Expect outputs (Markdown and PDFs) to be written to disk — avoid putting sensitive system paths as output destinations. 5) No credentials are requested by this skill, which reduces the risk of secret exfiltration, but always review any AI agent's browsing and data-retention policies before using it to collect potentially sensitive or proprietary information.Like a lobster shell, security has layers — review code before you run it.
latestvk973vytwqmss2xacyqjbqvqa51839nq5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.