📦
menews
80Create Ranked AI News Briefings
Tracking important AI news across the day takes repeated filtering and organization. This skill builds structured Chinese briefings from configured AIMPACT and ME News feeds.
Research & Learning View
Skills ai-news-pro
📦
ai-news-pro
v0.9.1 Content revision r1 High Risk 🌐 Network access⚙️ External commands
Generate Curated AI News Briefings
Monitoring AI news across a busy day takes time and produces inconsistent summaries. This skill builds ranked, categorized briefings from configured ME News feeds.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "ai-news-pro" from https://skillstore.io/skills/me-news-ai-news-pro.md and its manifest at https://skillstore.io/api/skills/me-news-ai-news-pro/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "ai-news-pro". Query the AI morning briefing.
Expected outcome:
AI Morning Brief | 2026.08.05
Large Models
1. Example model release
A short factual summary of the announced capability.
Source: publisher link
Trend: Model efficiency and agent integration lead current coverage.
Using "ai-news-pro". Show the 24-hour AI hot-news ranking.
Expected outcome:
- 1. Major AI product update: concise summary and source link.
- 2. AI funding announcement: concise summary and source link.
- 3. New safety policy: concise summary and source link.
- Trend: Product launches and governance changes are moving together.
Security Audit
High Riskv1 • 8/5/2026 Open versioned report
The skill intentionally contacts four allowlisted ME News API endpoints and instructs the agent to use curl, creating genuine network and external-command exposure. The scheduled-task example creates persistent execution, while entropy and most backtick detections are documentation false positives. API content is not explicitly isolated from agent instructions, leaving an indirect prompt-injection risk.
5
Files scanned
401
Lines analyzed
13
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Windows scheduled task creation
schtasks /create /tn "AI-News-Pro早报" /tr "openclaw agent --message '查询 AI 早报'" /sc daily /st 12:00
The command creates a named Windows task that invokes openclaw every day. The persistence is disclosed and user initiated, but it is a real persistent system modification.
Medium
Indirect Prompt Injection Exposure
The workflow extracts and summarizes external API fields without instructing the agent to treat fetched text as untrusted data. Malicious feed content could attempt to alter tool use or generated output.
The documented workflow clearly feeds external API content into agent classification, formatting, and optional delivery. No instruction isolation or validation rule is documented.
Capability review items (13)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Ruby/shell backtick execution
```powershell
The fenced block includes an executable schtasks command that creates a daily task. It is documented openly, but it makes a persistent host change.
Medium
Ruby/shell backtick execution
```bash
The fenced block contains executable crontab entries that invoke openclaw on a schedule. Arguments are fixed, but applying them creates persistent external-command execution.
Medium
Ruby/shell backtick execution
2. **调用 API(优先 `curl`,`web_fetch` 兜底)**:按 `sources.md` 配置,优先使用 `curl` 调用 AI 数据源 API
The skill directly instructs the agent to invoke curl for API collection. Endpoint allowlisting limits exposure, but an external process is intentionally executed.
Medium
Ruby/shell backtick execution
- AI 新闻 API(`curl`)
This collection step assigns the AI news API to curl, confirming intentional external-process use. The surrounding rules restrict requests to configured endpoints.
Medium
Ruby/shell backtick execution
- OpenClaw 新闻 API(`curl`)
This collection step assigns the OpenClaw news API to curl, confirming intentional external-process use. The surrounding rules restrict requests to configured endpoints.
Medium
Ruby/shell backtick execution
- AI 行业大事件 API(`curl`)
This collection step assigns the industry events API to curl, confirming intentional external-process use. The surrounding rules restrict requests to configured endpoints.
Medium
Ruby/shell backtick execution
- MetaEra AI 快讯(`curl`)
This collection step assigns the MetaEra feed to curl, confirming intentional external-process use. The surrounding rules restrict requests to configured endpoints.
Medium
Ruby/shell backtick execution
- `sources.md` 中所有 URL 均为 API endpoint,必须优先使用 `curl` 获取数据。
This rule requires curl requests to all configured API endpoints, confirming intended external-process and network use. The URLs are allowlisted, reducing injection risk.
Medium
Ruby/shell backtick execution
- 建议优先使用 `curl` 调用 API endpoint
The skill recommends invoking curl against an API endpoint, which is genuine external-command use. It does not construct a command from user input.
Low
Hardcoded URL
| MetaEra AI 快讯 | https://agent.me.news/skill/flash/list?page=1&size=20&category=ai | API | AI 分类快讯流
This is an active publisher-controlled API endpoint that the collection workflow requests. It creates intended third-party network exposure.
Low
Hardcoded URL
| AI 新闻 API | https://agent.me.news/skill/aimpact/articles?page=1&size=20&category=ai | API | AI 新闻列
This is an active publisher-controlled API endpoint that the collection workflow requests. It creates intended third-party network exposure.
Low
Hardcoded URL
| OpenClaw 新闻 API | https://agent.me.news/skill/aimpact/articles?page=1&size=20&category=openclaw |
This is an active publisher-controlled API endpoint that the collection workflow requests. It creates intended third-party network exposure.
Low
Hardcoded URL
| AI 行业大事件 API | https://agent.me.news/skill/aimpact/events | API | AI 行业大事件 |
This is an active publisher-controlled API endpoint that the collection workflow requests. It creates intended third-party network exposure.
Risk Factors
🌐 Network access (16)
⚙️ External commands (26)
SKILL.md:41 SKILL.md:68 SKILL.md:69 SKILL.md:77-82 SKILL.md:82-85 SKILL.md:85-88 SKILL.md:88-103 SKILL.md:103-104 SKILL.md:104-118 SKILL.md:118-126 SKILL.md:126-130 SKILL.md:130-131 SKILL.md:131 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-135 SKILL.md:135-136 SKILL.md:136 SKILL.md:146-150 SKILL.md:150 SKILL.md:151 SKILL.md:152-156 SKILL.md:156-157 SKILL.md:157 SKILL.md:158-160 SKILL.md:85
Detected Patterns
Windows scheduled task creation
Audited by: codex
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/me-news-ai-news-pro/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/me-news-ai-news-pro?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/me-news-ai-news-pro?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/me-news-ai-news-pro/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/me-news-ai-news-pro.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
me-news. (2026). ai-news-pro security audit report (audit version 1) [Author version 0.9.1]. Skillstore. https://skillstore.io/skills/me-news-ai-news-pro/audits/1BibTeX citation
@techreport{me-news-me-news-ai-news-pro-2026,
author = {me-news},
title = {ai-news-pro security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/me-news-ai-news-pro/audits/1},
note = {Author version 0.9.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-news-pro security audit report (audit version 1)"
version: "0.9.1"
type: report
authors:
- name: "me-news"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/me-news-ai-news-pro/audits/1"
identifiers:
- type: other
value: "skillstore:me-news-ai-news-pro:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
100
Maintainability
87
Content
65
Community
91
Spec Compliance
What You Can Build
Prepare a Daily Research Brief
Generate a concise morning report of important model, agent, safety, and product developments.
Track Product and Market Changes
Review ranked funding, acquisition, release, and industry-event updates from the last 24 hours.
Publish a Team News Digest
Format selected AI stories for delivery through an already configured messaging channel.
Try These Prompts
Get the Morning Briefing
Query the AI morning briefing for today. Show up to 10 ranked items with categories, summaries, and source links.
Review Recent Hot News
Query the 24-hour AI hot-news ranking. Prioritize high-scoring items and include one concise trend observation.
Analyze Selected Categories
Generate an AI evening briefing focused on agents, safety, and open source. Keep factual details and source links.
Build an Executive Trend Brief
Create a 24-hour executive AI digest. Rank major events, separate product and market signals, identify repeated themes, and note uncertain claims.
Best Practices
- Confirm that you trust agent.me.news before enabling network access.
- Open source links before using a briefing for important decisions.
- Preview reports and verify the destination before enabling automatic message delivery.
Avoid
- Do not treat API-provided AI scores as independent fact checks.
- Do not add unapproved endpoints or replace the configured source allowlist.
- Do not create scheduled tasks without explicit user approval and a removal plan.
Frequently Asked Questions
Which sources does this skill use?
It uses four configured endpoints on agent.me.news for AI articles, OpenClaw news, flash updates, and industry events.
Can it search the public web?
No. The instructions restrict collection to URLs listed in sources.md.
How are stories ranked?
The skill sorts by the API-provided AI score when that field is available.
Can it send reports automatically?
Yes, but delivery requires a separately configured message tool, channel, credentials, and external scheduling.
Does the skill store messaging credentials?
No. Its documentation states that credentials must be managed outside the skill.
Are the summaries verified for accuracy?
No. Review important claims and follow the included source links before making decisions.
Developer Details
Author
me-newsLicense
MIT
Author version
v0.9.1
Skillstore revision
r1
Ref
e5f4ac55b99872f66a36ead0049c5c56486976b8
Maintenance freshness
8/5/2026
Usage
0 downloads · 0 views
File structure
More from me-news
View all📦
me-featured-events
70Track AI and Web3 Events with ME News
Finding relevant events across dates and regions takes repeated work. This skill filters ME News events and supports confirmed recurring reminders.
Productivity View
📦
aimpact
38Create Ranked AI News Briefings
Tracking AI news across the day takes time and produces duplicate results. AIMPACT fetches fixed news feeds, filters them, and creates ranked briefings.
Research & Learning View
📦
aimpact-prediction-market
38Monitor Prediction Markets for Material Changes
Prediction market changes can be difficult to track across frequent updates. This skill polls approved feeds and formats alerts for notable events and movements.
Data & Analytics View
📦
aimpact-crypto
38Generate Ranked Crypto News Briefings
Crypto news is fragmented and difficult to review quickly. This skill collects configured feeds, ranks relevant items, and formats concise Chinese briefings.
Research & Learning View
Related Skills
View all📦
nature-reviewer
81Simulate Nature-Style Reviewer Reports
by Yuan1z0825
Researchers often need an objective pre-submission critique before sending a manuscript. This skill turns supplied manuscript material into grounded Nature-style reviewer reports.
Research & Learning View
📦
deep-research
80Research Complex Topics With Citations
by shubhamsaboo
Deep research is hard when sources disagree or lack context. This skill guides Claude, Codex, and Claude Code to synthesize sources, compare viewpoints, and produce cited research summaries.
Research & Learning View
📦
technical-research
79Evaluate Technical Options with Structured Spikes
by 89jobrien
Technical decisions often need evidence, not opinion. This skill guides timeboxed spikes with options, proof of concept results, comparison matrices, risks, and recommendations.
Research & Learning View
📦
tavily-search
79Search the Web with Tavily
by CK991357
AI assistants often lack current information for news, prices, releases, and fast-moving topics. This skill guides Claude, Codex, and Claude Code to call Tavily Search with clear query parameters.
Research & Learning View
📦
fact-checker
79Verify Claims With Evidence
by shubhamsaboo
Misinformation and weak sources make claims hard to trust. This skill guides Claude, Codex, and Claude Code through evidence-based verification, source ranking, and clear verdicts.
Research & Learning View
📦
url-citation-search
78Find URL Citations in Research
by zjsxply
Web pages are often cited in papers but missed by standard citation indexes. This skill guides Claude, Codex, and Claude Code to verify URL citations with direct evidence.
Research & Learning View