📦

menews

Name: menews
Author: me-news

v1.0.11 Ревизия содержимого r1 Безопасно 🌐 Доступ к сети⚙️ Внешние команды

Create Ranked AI News Briefings

Tracking important AI news across the day takes repeated filtering and organization. This skill builds structured Chinese briefings from configured AIMPACT and ME News feeds.

Поддерживает: Claude Codex Code(CC)

🥈 80 Серебро

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "menews" from https://skillstore.io/skills/me-news-menews.md and its manifest at https://skillstore.io/api/skills/me-news-menews/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/me-news-menews.md Подписанный manifest GET /api/skills/me-news-menews/manifest Подписанный lockfile GET /api/skills/me-news-menews/lockfile

Протестировать

Использование «menews». Query the AIMPACT morning briefing.

Ожидаемый результат:

AI Morning Brief | 2026.08.05

Large Models

1. Chinese headline
A concise summary of the reported facts.
Source: article link

Comment: A short trend connecting the leading stories.

Использование «menews». Show the 24-hour AI hot-news ranking.

Ожидаемый результат:

AI Hot News | Last 24 Hours

1. Highest-ranked item with category, summary, source link, and available AI score.
2. Second-ranked deduplicated item with the same fields.

Аудит безопасности

Безопасно

v1 • 05.08.2026 Открыть версионный отчет

The skill intentionally retrieves news from four fixed ME News API endpoints and directs agents to use curl or web_fetch. Most other alerts are markdown, example links, Unicode text, or transparent scheduling examples rather than executable or obfuscated behavior.

Просканировано файлов

398

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Пункты проверки возможностей (14)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний

SKILL.md:131

Ruby/shell backtick execution

2. **调用 API(优先 `curl`,`web_fetch` 兜底)**:按 `sources.md` 配置,优先使用 `curl` 调用 AIMPACT 数据源 API

The workflow explicitly directs the agent to invoke curl against configured API endpoints. Fixed endpoints limit injection risk, but external process and network execution are real.

Средний

SKILL.md:132-133

Ruby/shell backtick execution

- AIMPACT AI 新闻(`curl`)

This collection step explicitly designates curl for the AIMPACT AI news feed. It represents intended external command execution, despite markdown formatting.

Средний

SKILL.md:133-134

Ruby/shell backtick execution

- AIMPACT OpenClaw 新闻(`curl`)

This collection step explicitly designates curl for the AIMPACT OpenClaw feed. It represents intended external command execution, despite markdown formatting.

Средний

SKILL.md:134-135

Ruby/shell backtick execution

- AIMPACT 行业大事件(`curl`)

This collection step explicitly designates curl for the AIMPACT events feed. It represents intended external command execution, despite markdown formatting.

Средний

SKILL.md:135-136

Ruby/shell backtick execution

- MetaEra AI 快讯(`curl`)

This collection step explicitly designates curl for the MetaEra feed. It represents intended external command execution, despite markdown formatting.

Средний

SKILL.md:136

Ruby/shell backtick execution

- 仅当 `curl` 不可用或请求失败时,才使用 `web_fetch` 对同一 URL 兜底重试(遵循下方“API 抓取规则(强约束)”)

The line directs curl use and permits web_fetch as a fallback to the same endpoint. This is real external access with a constrained destination.

Средний

SKILL.md:150

Ruby/shell backtick execution

- `sources.md` 中所有 URL 均为 API endpoint,必须优先使用 `curl` 获取数据。

The rule explicitly requires curl to retrieve configured API endpoints. This is intentional external command and network activity.

Средний

SKILL.md:151

Ruby/shell backtick execution

- 仅当 `curl` 不可用或请求失败时,才允许使用 `web_fetch` 对同一 URL 兜底重试。

The rule directs curl execution and permits web_fetch after failure. The same-URL restriction reduces scope but does not remove external access.

Средний

SKILL.md:156-157

Ruby/shell backtick execution

- 建议优先使用 `curl` 调用 API endpoint

The line recommends invoking curl for API requests. This is intended external command execution, although no dynamic arguments are shown.

Средний

SKILL.md:157

Ruby/shell backtick execution

- `web_fetch` 仅作为兜底手段(`curl` 不可用或失败时)

The line identifies web_fetch and curl as request mechanisms. It confirms intended external access while limiting the fallback condition.

Низкий

SKILL.md:96

Hardcoded URL

| MetaEra AI 快讯 | https://agent.me.news/skill/flash/list?page=1&size=20&category=ai | API | ME News

This is a fixed ME News API endpoint that the collection workflow later instructs the agent to request. The outbound destination is explicit and purpose-related.

Низкий

SKILL.md:97

Hardcoded URL

| Aimpact AI 新闻 | https://agent.me.news/skill/aimpact/articles?page=1&size=20&category=ai | API | ME

This is a fixed AIMPACT API endpoint that the collection workflow later instructs the agent to request. The outbound destination is explicit and purpose-related.

Низкий

SKILL.md:98

Hardcoded URL

| Aimpact OpenClaw 新闻 | https://agent.me.news/skill/aimpact/articles?page=1&size=20&category=opencla

This is a fixed AIMPACT API endpoint that the collection workflow later instructs the agent to request. The outbound destination is explicit and purpose-related.

Низкий

SKILL.md:99

Hardcoded URL

This is a fixed AIMPACT API endpoint that the collection workflow later instructs the agent to request. The outbound destination is explicit and purpose-related.

Факторы риска

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/me-news-menews/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/me-news-menews/security.svg)](https://skillstore.io/skills/me-news-menews?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/me-news-menews?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/me-news-menews/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/me-news-menews.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

me-news. (2026). menews security audit report (audit version 1) [Author version 1.0.11]. Skillstore. https://skillstore.io/skills/me-news-menews/audits/1

Цитата BibTeX

@techreport{me-news-me-news-menews-2026,
  author = {me-news},
  title = {menews security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/me-news-menews/audits/1},
  note = {Author version 1.0.11}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "menews security audit report (audit version 1)"
version: "1.0.11"
type: report
authors:
  - name: "me-news"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/me-news-menews/audits/1"
identifiers:
  - type: other
    value: "skillstore:me-news-menews:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

100

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Prepare a Daily Research Brief

Generate a ranked morning summary of recent AI developments with source links and concise Chinese summaries.

Monitor Product and Market Changes

Review the highest-scoring model, agent, funding, safety, and product news from the last 24 hours.

Publish an Internal News Digest

Create a consistent evening report for a team and deliver it through an approved messaging channel.

Попробуйте эти промпты

Get the Morning Briefing

Query the AIMPACT morning briefing. Return up to ten ranked items with Chinese summaries and source links.

Review Current Hot News

Query the 24-hour hot-news ranking. Group the results by category and emphasize the five highest AI scores.

Focus on Selected Categories

Create an AI selected-news report for the last 24 hours. Prioritize agents, safety, and open-source releases while preserving source links.

Build and Deliver an Evening Digest

Generate the AIMPACT evening briefing, remove duplicate titles, rank by AI score, and send it through my configured message channel.

Лучшие практики

Review source links before sharing reports or making decisions.
Confirm the intended recipients and schedule before enabling message delivery.
Use the defined report type that matches the required time window.

Избегать

Do not treat generated summaries as independent fact verification.
Do not add unapproved endpoints outside the configured source allowlist.
Do not enable scheduled delivery before testing the report and recipient configuration.