📦 Daily Business Report — 每日商情简报
v1.0.0自动整合天气、加密货币行情、新闻头条、系统健康与日历事件，一键生成每日商业简报，助力高效决策。
0· 567·0 当前·0 累计
by @mariusfit下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says, but review these practical points before installing:
- Network calls: The script performs outbound HTTP(S) requests to public APIs (wttr.in, api.coingecko.com, api.quotable.io, and optionally newsdata.io). If you operate in a restricted environment, confirm these endpoints are allowed.
- Local storage: It creates and reads a config file at ~/.daily-report/config.json (or the directory set by REPORT_CONFIG_DIR). If you store a NewsData.io API key there, it w...详细分析 ▾
ℹ 用途与能力
Name/description (daily business briefing) matches the included script: it fetches weather (wttr.in), crypto (CoinGecko), quotes, optional NewsData.io headlines, and local system stats. Minor mismatch: README/promotional text mentions sending reports via WhatsApp/other delivery channels, but the included script does not implement any outbound delivery (it only generates and can write files); this is a documentation/feature mismatch rather than malicious behavior.
ℹ 指令范围
SKILL.md instructs the agent to run the bundled Python script with well-scoped commands (generate, config, test). The example integration suggests cron scheduling and says 'send the result' — the skill itself doesn't include messaging/delivery code, so users should be aware that delivery must be implemented separately and that scheduling automation could forward generated reports to other systems if configured elsewhere.
✓ 安装机制
Instruction-only skill with no install spec and a small pure-Python script that relies on the stdlib urllib and shutil; nothing is downloaded or written to system locations beyond the user's config directory.
ℹ 凭证需求
The skill requests no environment variables or credentials. It does respect REPORT_CONFIG_DIR if provided and otherwise writes config to ~/.daily-report/config.json — that file may contain an optional NewsData.io API key if you set one, so credentials would be stored locally. The script reads /proc/meminfo and disk usage for system stats (expected for 'system' section).
✓ 持久化与权限
always is false and the skill does not request persistent elevated privileges or modify other skills' configs. It only persists its own config under a user-owned directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/24
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install oc-daily-business-report
镜像加速npx clawhub@latest install oc-daily-business-report --registry https://cn.longxiaskill.com