📰 Content Watcher — AI摘要聚合
v1.0.0监控RSS、博客与新闻源，AI自动摘要并生成每日Markdown或控制台简报，一键掌握资讯。
1· 1.3k·10 当前·10 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceContent Watcher is internally consistent with its stated purpose: a local CLI that fetches user-provided RSS/URLs, extracts content, and produces local summaries/digests; nothing in the package demands unrelated credentials or surprising installs.
评估建议
This package appears to be what it says: a local CLI that fetches RSS/URLs you add and produces local summaries. Before installing, consider: (1) review the package source or install in a sandbox if you are uncomfortable running code from an unknown author; (2) be cautious about adding internal or sensitive URLs as monitored sources (the tool will fetch any URL you configure, which could expose internal endpoints to local network requests); (3) if you later enable webhook/email integrations, ins...详细分析 ▾
✓ 用途与能力
Name/description (RSS monitoring + summarization) align with required binaries (node, npm), the npm install spec, and the provided CLI code. The code implements RSS parsing, HTTP fetch/extract, local summarization, and markdown digest generation. Minor mismatch: SKILL.md/README mention integrations (Feishu, Email delivery) but the included code does not implement remote delivery or require credentials for those services.
✓ 指令范围
SKILL.md instructions are limited to installing the package, adding sources, running the CLI, and saving output. Runtime code reads/writes a single user-scoped config at ~/.config/content-watcher/config.json, fetches URLs provided by the user, and writes digest output locally or to a file. There are no instructions to read unrelated system files or to transmit data to external endpoints other than fetching the user-specified feeds/URLs.
✓ 安装机制
Install uses a normal npm package (content-watcher) and provides a CLI binary; package.json and package-lock.json list common, well-known dependencies (axios, cheerio, rss-parser, etc.). No downloads from custom URLs, no extracted archives from arbitrary hosts.
✓ 凭证需求
The skill declares no required environment variables or credentials and the code does not expect secrets. This matches the implementation. Note: the README/SKILL.md reference possible webhook/email delivery but no code requires tokens; if future versions add those features they will likely request credentials—review those changes before granting secrets.
✓ 持久化与权限
The skill stores its own config under the user's home directory (~/.config/content-watcher/config.json) and persists seen URLs — this is expected for a monitoring CLI. always is false and the skill does not modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/14
Initial release: RSS monitoring with AI summarization and daily digest generation
● 可疑
安装命令
点击复制官方npx clawhub@latest install content-watcher
镜像加速npx clawhub@latest install content-watcher --registry https://cn.longxiaskill.com