📦 Newsletter Generator — 智能邮件简报
v1.0.0一键生成含精选内容、推广链接与个性化推荐的自动化邮件简报，适用于日/周更、邮件列表增长及通过联盟内容变现。
1· 2.0k·1 当前·1 累计
by 下载技能包
最后更新
2026/2/28
安全扫描
OpenClaw
可疑
high confidenceThe skill's README and feature list promise affiliate integration, analytics, scheduling, and RSS fetching, but the shipped code is limited, contains mocked data, and several referenced scripts/features are missing — this mismatch is suspicious and should be resolved before trusting the skill.
评估建议
This skill's documentation promises many integrations (RSS crawling, affiliate networks, analytics, scheduling) but the shipped code only generates newsletters from hard-coded mock data and writes local files; several scripts mentioned in the README are missing. Before installing or using it in production: 1) Ask the author for the missing scripts and a clear explanation of which external services the skill will contact and what credentials it needs. 2) Inspect any additional code that will perf...详细分析 ▾
⚠ 用途与能力
The name/description promise curated content, affiliate integration, analytics, scheduling, and personalization. The bundled code only provides two Python scripts that generate newsletters from hard-coded mock data and write local files. There are no implementations for affiliate network APIs, analytics ingestion, ESP integration, or real RSS fetching. Several capabilities documented in SKILL.md (add_affiliate_links.py, schedule_newsletter.py, analytics_report.py) are referenced but not present. Requiring no credentials while advertising integrations that normally need API keys (ESP, affiliate networks, analytics) is inconsistent.
⚠ 指令范围
SKILL.md instructs the agent to run various scripts and to curate from RSS feeds / add affiliate links / schedule newsletters. The curate script accepts rss URLs but uses MOCK_RSS_DATA and does not perform network requests or real RSS parsing. SKILL.md references scripts that are not in the bundle. The instructions therefore over-promise and give the agent discretion to perform operations that the included code does not implement — this is confusing and could lead to incorrect assumptions about what will actually happen at runtime.
✓ 安装机制
No install specification and the skill is primarily instruction + small Python scripts. Nothing is downloaded from external URLs and no install operations write code to the system. This is low-risk from an install/mechanism perspective.
⚠ 凭证需求
The skill declares no required environment variables or credentials, yet SKILL.md describes integration with affiliate networks, ESPs, and analytics (which typically require API keys/tokens). The absence of declared env vars is inconsistent with the claimed features. If the skill were extended to contact affiliate/ESP APIs it would need credentials — the current manifest does not request them or document how secrets would be used.
✓ 持久化与权限
The skill does not request always:true and has no install hooks or code that modifies other skills or system-wide settings. It appears to run only as invoked and writes outputs locally (markdown/JSON files). No elevated persistence is requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/4
Initial release: Automated email newsletter generation with curated content, affiliate links, and personalized recommendations
● 无害
安装命令
点击复制官方npx clawhub@latest install newsletter-generator
镜像加速npx clawhub@latest install newsletter-generator --registry https://cn.longxiaskill.com