Agent skill · Audited from source

news-aggregator-skill

skill · cclank/news-aggregator-skillLicence not declaredAudited 20 Oct 2026 · source 3254d45e53f6

★ 1,304pushed 145 days ago
!CAUTIONGrade B · 89/100 · 3 findings · 3254d45
1,304repo stars · whole cclank/news-aggregator-skill

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 3254d45e53f6 and observed network access and no hard-coded secrets. The audit raised 3 findings, 1 critical or high. What it does: Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 44+ sources including Hacker News, Lobsters, Dev.to, GitHub, arXiv, Hugging Face Papers, AIHOT, TLDR AI, Import AI, BBC,…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “news-aggregator-skill (cclank/news-aggregator-skill)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/cclank/news-aggregator-skill

Trust audit

Audit 0.4.1 · source read 20 Oct 2026

Trust score89/100!CAUTION B
0 critical1 high0 medium2 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkDeclared6 observations
  • ShellNone observedNo commands run in the source
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS1
L1 Static sourceSecrets, path traversal, supply chain, hidden codeFAIL2
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass, no license.

Findings (3)

HIGHNetwork egressnet.tls_off · scripts/rss_parser.py:108
F-04 Network egressCWE-200 · CWE-319Layer L1
response = requests.get(url, headers=headers, timeout=15, verify=False)
Why
certificate verification is disabled
Fix
leave verification on
LOWInventory / provenanceinv.no_license
F-13 Inventory / provenanceCWE-1104Layer L0
Why
no LICENSE file and no repo licence
Fix
add a licence
LOWSupply chainsupply.unpinned · requirements.txt
F-08 Supply chainCWE-829 · CWE-1357Layer L1
requests, beautifulsoup4
Why
2 requirement(s) not pinned with ==
Fix
pin exact versions

Audit 0.4.1 · source sha 3254d45e53f6 · 20 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishercclank GitHub userOwner of the repository this skill is read from
  • Source foldercclank/news-aggregator-skillThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdict3254d45e53f6A new audit runs when the source changes
  • Repository statusNot archivedLast push 145 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 44+ sources including Hacker News, Lobsters, Dev.to, GitHub, arXiv, Hugging Face Papers, AIHOT, TLDR AI, Import AI, BBC,…

---
name: news-aggregator-skill
description: "Comprehensive news aggregator that fetches, filters, and deeply analyzes real-time content from 44+ sources including Hacker News, Lobsters, Dev.to, GitHub, arXiv, Hugging Face Papers, AIHOT, TLDR AI, Import AI, BBC, The Guardian, Al Jazeera, France 24, Reuters fallback, AI Newsletters, WallStreetCN, Weibo, 少数派, InfoQ 中文, Podcasts, and user-defined OPML feeds. Use when user requests 'daily scans', 'tech news', 'finance updates', 'AI briefings', 'international news', 'deep analysis', or says '如意如意' to open the interactive menu."
---

# News Aggregator Skill

Fetch real-time hot news from 44+ sources (including international news + AI curated aggregators + user-defined OPML feeds), generate deep analysis reports in Chinese.

---

## 🔄 Universal Workflow (3 Steps)

**Every** news request follows the same workflow, regardless of source or combination:

### Step 1: Fetch Data
```bash
# Single source
python3 scripts/fetch_news.py --source <source_key> --no-save

# Multiple sources (comma-separated)
python3 scripts/fetch_news.py --source hackernews,github,wallstreetcn --no-save

# All sources (broad scan)
python3 scripts/fetch_news.py --source all --limit 15 --deep --no-save

# With keyword filter (auto-expand: "AI" → "AI,LLM,GPT,Claude,Agent,RAG")
python3 scripts/fetch_news.py --source hackernews --keyword "AI,LLM,GPT" --deep --no-save
```

### Step 2: Generate Report
Read the output JSON and format **every** item using the **Unified Report Template** below. Translate all content to **Simplified Chinese**.

### Step 3: Save & Present
Save the report to `reports/YYYY-MM-DD/<source>_report.md`, then display the full content to the user.

---

## 📰 Unified Report Template

**All sources use this single template.** Show/hide optional fields based on data availability.

```markdown
#### N. [标题 (中文翻译)](https://original-url.com)
- **Source**: 源名 | **Time**: 时间 | **Heat**: 🔥 热度值
- **Links**: [Discussion](hn_url) | [GitHub](gh_url)     ← 仅在数据存在时显示
- **Summary**: 一句话中文摘要。
- **Deep Dive**: 💡 **Insight**: 深度分析(背景、影响、技术价值)。
```

### Source-Specific Adaptations

Only the **differences** from the universal template:

| Source | Adaptation |
|---|---|
| **Hacker News** | **MUST** include `[Discussion](hn_url)` link |
| **GitHub** | Use `🌟 Stars` for Heat, add `Lang` field, add `#Tags` in Deep Dive |
| **Hugging Face** | Use `🔥 +N` upvotes for Heat, include `[GitHub](url)` if present, write **深度解读** (not just translate abstract) |
| **Weibo** | Preserve exact heat text (e.g. "108万") |
| **AIHOT** | `summary` 已是中文编辑稿,**直接引用**不要再翻译;Heat 字段为空也别造数据;保留 `推荐理由` 风格的一句话点评 |
| **TLDR AI** | 单条标题往往是多主题混合(`Topic A 💻, Topic B ⚡, Topic C ⛪`),**拆成 bullet 列出每个主题**;`summary` 是 HTML 段落,需要拆出每个主题对应的一两句概述 |
| **Import AI** | 周刊长文,标题形如 `Import AI 458: 主题1; 主题2; 主题3`。**建议默认配 `--deep`**,否则 RSS summary 只是开头几句;Deep Dive 直接提炼 Jack Clark 的核心观点而非平铺事实 |
| **International News** | **MUST** use the Unified Report Template for every item;只使用最近 24h RSS 条目,不用更早新闻 Smart Fill;英文标题与摘要翻译成简体中文,保留原始媒体名与链接;同一事件多家媒体重复时可合并观点但不能合并链接 |
| **Reuters** | `reuters` 使用 Google News RSS 的 `site:reuters.com` fallback;报告里保留 `Reuters (Google News fallback)` source,不要写成官方公开 RSS |

---

## 🛠️ Tools

### fetch_news.py

| Arg | Description | Default |
|---|---|---|
| `--source` | Source key(s), comma-separated. See table below. | `all` |
| `--limit` | Max items per source | `15` |
| `--keyword` | Comma-separated keyword filter | None |
| `--deep` | Download article text for richer analysis | Off |
| `--save` | Force save to reports dir | Auto for single source |
| `--outdir` | Custom output directory | `reports/YYYY-MM-DD/` |

### Available Sources (44+ with user OPML)

| Category | Key | Name |
|---|---|---|
| **Global News** | `hackernews` | Hacker News |
| | `36kr` | 36氪 |
| | `wallstreetcn` | 华尔街见闻 |
| | `tencent` | 腾讯新闻 |
| | `weibo` | 微博热搜 |
| | `v2ex` | V2EX |
| | `producthunt` | Product Hunt |
| | `github` | GitHub Trending |
| **Tech Community** (v2) | `lobsters` | Lobsters |
| | `devto` | Dev.to |
| **AI/Tech** | `huggingface` | HF Daily Papers |
| | `arxiv` | arXiv (cs.AI/cs.CL/cs.LG, v2) |
| | `ai_newsletters` | All AI Newsletters (aggregate) |
| | `bensbites` | Ben's Bites |
| | `interconnects` | Interconnects (Nathan Lambert) |
| | `oneusefulthing` | One Useful Thing (Ethan Mollick) |
| | `chinai` | ChinAI (Jeffrey Ding) |
| | `memia` | Memia |
| | `aitoroi` | AI to ROI |
| | `kdnuggets` | KDnuggets |
| **Chinese** (v2) | `sspai` | 少数派 |
| | `infoq_cn` | InfoQ 中文站(RSS 只给标题,**推荐配 `--deep`** 拿正文) |
| **AI Curated** (v3) | `aihot` | AIHOT 中文 AI 精选(跨源 + 中文编辑稿)|
| | `tldr_ai` | TLDR AI 英文日刊 |
| | `import_ai` | Import AI by Jack Clark 周刊(**推荐 `--deep`**)|
| **International News** | `international` | 最近 24h 国际新闻聚合(BBC / Guardian / Al Jazeera / France 24 / Reuters fallback)|
| | `bbc_top` | BBC Top News (24h) |
| | `bbc_world` | BBC World (24h) |
| | `bbc_chinese` | BBC 中文 (24h) |
| | `guardian_world` | The Guardian World (24h) |
| | `aljazeera` | Al Jazeera (24h) |
| | `france24` | France 24 (24h) |
| | `reuters` | Reuters via Google News RSS fallback (24h) |
| **Podcasts** | `podcasts` | All Podcasts (aggregate) |
| | `lexfridman` | Lex Fridman |
| | `80000hours` | 80,000 Hours |
| | `latentspace` | Latent Space |
| **Essays** | `essays` | All Essays (aggregate) |
| | `paulgraham` | Paul Graham |
| | `waitbutwhy` | Wait But Why |
| | `jamesclear` | James Clear |
| | `farnamstreet` | Farnam Street |
| | `scottyoung` | Scott Young |
| | `dankoe` | Dan Koe |
| **Custom** (v2) | `user` | Your OPML feeds (see below) |

### 自定义订阅源 (User OPML)

把你常看的 RSS/Atom 源写进 OPML,`--source user` 即可统一抓取。

**1. 放置 OPML 文件**(按优先级查找):
- `~/.config/news-aggregator/user_sources.opml`(推荐,跨 skill 复用)
- `<skill_root>/user_sources.opml`(本仓库内)

**2. 文件格式**:标准 OPML 2.0,可直接从 Feedly / Inoreader / NetNewsWire 导出。参考 `user_sources.opml.example`:

```xml
<outline type="rss" text="Simon Willison" title="Simon Willison"
         xmlUrl="https://simonwill

Excerpt, first 6,008 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 3254d45

Download folder ↗
npx skills add https://github.com/cclank/news-aggregator-skill
git clone [email protected]:cclank/news-aggregator-skill.git YourProject/.claude/skills/news-aggregator-skill
pip install -r requirements.txt

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 3254d45e53f6 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
GitHub CopilotMentioned in its text, not testedSkills for GitHub Copilot · About GitHub Copilot
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 3254d45e53f6

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/cclank/news-aggregator-skill/badge.svg)](https://modelsatlas.com/skills/cclank/news-aggregator-skill/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/cclank/news-aggregator-skill/badge.svg)](https://modelsatlas.com/skills/cclank/news-aggregator-skill/)

Questions about news-aggregator-skill

What does the news-aggregator-skill skill do?
这是一个为您定制的全网新闻聚合skill,支持多个信息源,支持深度获取,能够阅读文章正文并提供有理有据的深度解读。
Is news-aggregator-skill safe to install?
With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can news-aggregator-skill access on my machine?
The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does news-aggregator-skill work with?
Its documentation mentions copilot and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (3254d45e53f6), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.