Agent skill · Audited from source
news-aggregator-skill
skill · cclank/news-aggregator-skillLicence not declaredAudited 20 Oct 2026 · source 3254d45e53f6
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 3254d45e53f6 and observed network access and no hard-coded secrets. The audit raised 3 findings, 1 critical or high. What it does: Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 44+ sources including Hacker News, Lobsters, Dev.to, GitHub, arXiv, Hugging Face Papers, AIHOT, TLDR AI, Import AI, BBC,…
Cite
Cite this page
ModelsAtlas. “news-aggregator-skill (cclank/news-aggregator-skill)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/cclank/news-aggregator-skill
Trust audit
Audit 0.4.1 · source read 20 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkDeclared6 observations
- ShellNone observedNo commands run in the source
- DependenciesNot pinnedSome versions float
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | FAIL | 2 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass, no license.
Findings (3)
HIGHNetwork egressnet.tls_off · scripts/rss_parser.py:108
response = requests.get(url, headers=headers, timeout=15, verify=False)
- Why
- certificate verification is disabled
- Fix
- leave verification on
LOWInventory / provenanceinv.no_license
- Why
- no LICENSE file and no repo licence
- Fix
- add a licence
LOWSupply chainsupply.unpinned · requirements.txt
requests, beautifulsoup4
- Why
- 2 requirement(s) not pinned with ==
- Fix
- pin exact versions
Audit 0.4.1 · source sha 3254d45e53f6 · 20 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishercclank GitHub userOwner of the repository this skill is read from
- Source foldercclank/news-aggregator-skillThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict3254d45e53f6A new audit runs when the source changes
- Repository statusNot archivedLast push 145 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 44+ sources including Hacker News, Lobsters, Dev.to, GitHub, arXiv, Hugging Face Papers, AIHOT, TLDR AI, Import AI, BBC,…
---
name: news-aggregator-skill
description: "Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 44+ sources including Hacker News, Lobsters, Dev.to, GitHub, arXiv, Hugging Face Papers, AIHOT, TLDR AI, Import AI, BBC, The Guardian, Al Jazeera, France 24, Reuters fallback, AI Newsletters, WallStreetCN, Weibo, 少数派, InfoQ 中文, Podcasts, and user-defined OPML feeds. Use when user requests 'daily scans', 'tech news', 'finance updates', 'AI briefings', 'international news', 'deep analysis', or says '如意如意' to open the interactive menu."
---
# News Aggregator Skill
Fetch real-time hot news from 44+ sources (including international news + AI curated aggregators + user-defined OPML feeds), generate deep analysis reports in Chinese.
---
## 🔄 Universal Workflow (3 Steps)
**Every** news request follows the same workflow, regardless of source or combination:
### Step 1: Fetch Data
```bash
# Single source
python3 scripts/fetch_news.py --source <source_key> --no-save
# Multiple sources (comma-separated)
python3 scripts/fetch_news.py --source hackernews,github,wallstreetcn --no-save
# All sources (broad scan)
python3 scripts/fetch_news.py --source all --limit 15 --deep --no-save
# With keyword filter (auto-expand: "AI" → "AI,LLM,GPT,Claude,Agent,RAG")
python3 scripts/fetch_news.py --source hackernews --keyword "AI,LLM,GPT" --deep --no-save
```
### Step 2: Generate Report
Read the output JSON and format **every** item using the **Unified Report Template** below. Translate all content to **Simplified Chinese**.
### Step 3: Save & Present
Save the report to `reports/YYYY-MM-DD/<source>_report.md`, then display the full content to the user.
---
## 📰 Unified Report Template
**All sources use this single template.** Show/hide optional fields based on data availability.
```markdown
#### N. [标题 (中文翻译)](https://original-url.com)
- **Source**: 源名 | **Time**: 时间 | **Heat**: 🔥 热度值
- **Links**: [Discussion](hn_url) | [GitHub](gh_url) ← 仅在数据存在时显示
- **Summary**: 一句话中文摘要。
- **Deep Dive**: 💡 **Insight**: 深度分析(背景、影响、技术价值)。
```
### Source-Specific Adaptations
Only the **differences** from the universal template:
| Source | Adaptation |
|---|---|
| **Hacker News** | **MUST** include `[Discussion](hn_url)` link |
| **GitHub** | Use `🌟 Stars` for Heat, add `Lang` field, add `#Tags` in Deep Dive |
| **Hugging Face** | Use `🔥 +N` upvotes for Heat, include `[GitHub](url)` if present, write **深度解读** (not just translate abstract) |
| **Weibo** | Preserve exact heat text (e.g. "108万") |
| **AIHOT** | `summary` 已是中文编辑稿,**直接引用**不要再翻译;Heat 字段为空也别造数据;保留 `推荐理由` 风格的一句话点评 |
| **TLDR AI** | 单条标题往往是多主题混合(`Topic A 💻, Topic B ⚡, Topic C ⛪`),**拆成 bullet 列出每个主题**;`summary` 是 HTML 段落,需要拆出每个主题对应的一两句概述 |
| **Import AI** | 周刊长文,标题形如 `Import AI 458: 主题1; 主题2; 主题3`。**建议默认配 `--deep`**,否则 RSS summary 只是开头几句;Deep Dive 直接提炼 Jack Clark 的核心观点而非平铺事实 |
| **International News** | **MUST** use the Unified Report Template for every item;只使用最近 24h RSS 条目,不用更早新闻 Smart Fill;英文标题与摘要翻译成简体中文,保留原始媒体名与链接;同一事件多家媒体重复时可合并观点但不能合并链接 |
| **Reuters** | `reuters` 使用 Google News RSS 的 `site:reuters.com` fallback;报告里保留 `Reuters (Google News fallback)` source,不要写成官方公开 RSS |
---
## 🛠️ Tools
### fetch_news.py
| Arg | Description | Default |
|---|---|---|
| `--source` | Source key(s), comma-separated. See table below. | `all` |
| `--limit` | Max items per source | `15` |
| `--keyword` | Comma-separated keyword filter | None |
| `--deep` | Download article text for richer analysis | Off |
| `--save` | Force save to reports dir | Auto for single source |
| `--outdir` | Custom output directory | `reports/YYYY-MM-DD/` |
### Available Sources (44+ with user OPML)
| Category | Key | Name |
|---|---|---|
| **Global News** | `hackernews` | Hacker News |
| | `36kr` | 36氪 |
| | `wallstreetcn` | 华尔街见闻 |
| | `tencent` | 腾讯新闻 |
| | `weibo` | 微博热搜 |
| | `v2ex` | V2EX |
| | `producthunt` | Product Hunt |
| | `github` | GitHub Trending |
| **Tech Community** (v2) | `lobsters` | Lobsters |
| | `devto` | Dev.to |
| **AI/Tech** | `huggingface` | HF Daily Papers |
| | `arxiv` | arXiv (cs.AI/cs.CL/cs.LG, v2) |
| | `ai_newsletters` | All AI Newsletters (aggregate) |
| | `bensbites` | Ben's Bites |
| | `interconnects` | Interconnects (Nathan Lambert) |
| | `oneusefulthing` | One Useful Thing (Ethan Mollick) |
| | `chinai` | ChinAI (Jeffrey Ding) |
| | `memia` | Memia |
| | `aitoroi` | AI to ROI |
| | `kdnuggets` | KDnuggets |
| **Chinese** (v2) | `sspai` | 少数派 |
| | `infoq_cn` | InfoQ 中文站(RSS 只给标题,**推荐配 `--deep`** 拿正文) |
| **AI Curated** (v3) | `aihot` | AIHOT 中文 AI 精选(跨源 + 中文编辑稿)|
| | `tldr_ai` | TLDR AI 英文日刊 |
| | `import_ai` | Import AI by Jack Clark 周刊(**推荐 `--deep`**)|
| **International News** | `international` | 最近 24h 国际新闻聚合(BBC / Guardian / Al Jazeera / France 24 / Reuters fallback)|
| | `bbc_top` | BBC Top News (24h) |
| | `bbc_world` | BBC World (24h) |
| | `bbc_chinese` | BBC 中文 (24h) |
| | `guardian_world` | The Guardian World (24h) |
| | `aljazeera` | Al Jazeera (24h) |
| | `france24` | France 24 (24h) |
| | `reuters` | Reuters via Google News RSS fallback (24h) |
| **Podcasts** | `podcasts` | All Podcasts (aggregate) |
| | `lexfridman` | Lex Fridman |
| | `80000hours` | 80,000 Hours |
| | `latentspace` | Latent Space |
| **Essays** | `essays` | All Essays (aggregate) |
| | `paulgraham` | Paul Graham |
| | `waitbutwhy` | Wait But Why |
| | `jamesclear` | James Clear |
| | `farnamstreet` | Farnam Street |
| | `scottyoung` | Scott Young |
| | `dankoe` | Dan Koe |
| **Custom** (v2) | `user` | Your OPML feeds (see below) |
### 自定义订阅源 (User OPML)
把你常看的 RSS/Atom 源写进 OPML,`--source user` 即可统一抓取。
**1. 放置 OPML 文件**(按优先级查找):
- `~/.config/news-aggregator/user_sources.opml`(推荐,跨 skill 复用)
- `<skill_root>/user_sources.opml`(本仓库内)
**2. 文件格式**:标准 OPML 2.0,可直接从 Feedly / Inoreader / NetNewsWire 导出。参考 `user_sources.opml.example`:
```xml
<outline type="rss" text="Simon Willison" title="Simon Willison"
xmlUrl="https://simonwillExcerpt, first 6,008 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 3254d45
npx skills add https://github.com/cclank/news-aggregator-skill git clone [email protected]:cclank/news-aggregator-skill.git YourProject/.claude/skills/news-aggregator-skill pip install -r requirements.txt
git clone https://github.com/cclank/news-aggregator-skill git -C news-aggregator-skill checkout 3254d45e53f6
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 3254d45e53f6 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| GitHub Copilot | Mentioned in its text, not tested | Skills for GitHub Copilot · About GitHub Copilot |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
3254d45e53f6
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/cclank/news-aggregator-skill/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/cclank/news-aggregator-skill/)
<a href="https://modelsatlas.com/skills/cclank/news-aggregator-skill/"><img src="https://modelsatlas.com/skills/cclank/news-aggregator-skill/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about news-aggregator-skill
What does the news-aggregator-skill skill do?
Is news-aggregator-skill safe to install?
What can news-aggregator-skill access on my machine?
Which assistants does news-aggregator-skill work with?
How current is this page?
Sources
- github.com/cclank/news-aggregator-skill — the audited source at commit 3254d45e53f6 and every finding aboveObserved · 20 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the news-aggregator-skill skill do?
- Is news-aggregator-skill safe to install?
- What can news-aggregator-skill access on my machine?