AI DevBlog Factory

• Risk level: Low Risk
• Analyzed: Apr 15, 2026, 7:43 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's declared purpose (collect trending/tech news, summarize, generate an article, and publish to Feishu) matches its instructions and manifest; it is an instruction-only composition of other skills and does not request disproportionate system access on its own.

This skill is a workflow that chains other skills to fetch, summarize, generate, and publish developer blog posts. Before installing: (1) Inspect the dependent skills (Agent-Reach, summarize, wechat-article-pro, feishu_doc) — especially Agent-Reach (scraping) and feishu_doc (publishing) — to confirm how they handle credentials, rate limits, and external endpoints; (2) Only provide Feishu bot tokens or GitHub API cookies to the specific skill that needs them and store them in your agent's secret management (do not paste tokens into public inputs); (3) Verify the fallback 'clawhub trending API' and any external endpoints are acceptable for your data/privacy requirements; (4) If you plan automated runs, set appropriate scheduling to avoid API rate limits and respect content licensing. Overall the skill appears internally consistent, but its safety depends on the trustworthiness and implementation details of the composed skills and how you supply their credentials.