安全扫描
OpenClaw
安全
high confidence该技能的指令(获取 RSS 源、选择条目、以 Trump 式口吻输出有证据支撑的分析)与其既定目的一致,且未索取无关凭据或安装。
评估建议
This skill is internally consistent: it only fetches and parses the specified RSS feed and formats education-style analyses, and it requests no credentials or installs. Before installing, confirm you trust the feed source (https://www.trumpstruth.org) because the model will fetch and summarize whatever that site publishes; the skill's guidance tries to avoid fabricating original tweets but cannot validate source authenticity. If you plan to use Watch mode, understand it requires an external sche...详细分析 ▾
✓ 用途与能力
The name/description claim to aggregate trumpstruth.org/feed and produce evidence/analysis in several modes; the SKILL.md only asks the model to fetch and parse that RSS feed and format outputs. No unrelated binaries, env vars, or platform access are requested—requirements match purpose.
✓ 指令范围
Runtime instructions are narrowly focused: use web_fetch on https://www.trumpstruth.org/feed, parse <item> entries, select 2–5 items and produce an evidence-backed financial-education analysis and canned output templates. The skill does not instruct reading local files, environment variables, or unrelated system state. It does require maintaining a conversation-scoped lastSeenId for Watch mode and warns that periodic triggers need external scheduling.
✓ 安装机制
Instruction-only skill with no install spec and no code files. No downloads or package installs are requested, which is low risk and proportional to its function.
✓ 凭证需求
No environment variables, credentials, or config paths are required. The requested external network access is proportional (single RSS feed URL) and justified by the stated purpose.
✓ 持久化与权限
always:false and no system-level persistence are set. The only persistence implied is conversation-scoped state (lastSeenId) to track seen items for Watch mode; the skill explicitly notes external scheduling is required for periodic checks. Autonomous invocation is allowed by platform default but is not combined with elevated privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
trump-invest v1.0.0 —— 首个版本,提供对 trumpstruth.org Trump RSS 源的教育/分析解读。 支持多输出模式:Evidence(带推文证据)、Latest、Time、Trump对话、K线艺术家辅助、Watch增量监控。 严格区分推文证据输出(Evidence 模式)与教育性情景推演(非 Evidence 模式)。 全部输出合规,明示风险,不提供个性化买卖建议;若用户询问买卖,自动引导至“观察/风险/情景推演”。 资产关键词与金融分析方向自动映射,要点蒸馏与观察清单可持续优化。
● 无害
安装命令
点击复制官方npx clawhub@latest install trump-invest
镜像加速npx clawhub@latest install trump-invest --registry https://cn.longxiaskill.com