Trending News Aggregator

• Outcome: Pass
• Latest audit: Sep 15, 2026 · 1:23 AM UTC
• Version: 1.0.0

Overview

This is a coherent Chinese-language news aggregation skill that uses public web search and optional scheduled push delivery, with no artifact evidence of malicious code or hidden behavior.

Install only if you want a Chinese-language trending-news workflow. Before enabling scheduling or push delivery, confirm the destination channel, credentials, schedule, and how to disable the task; keep OpenClaw updated.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (11)

YARA rule 'backdoor_persistence': Backdoor persistence with malicious payloads (shell commands, SSH key injection, hidden root users) [malware]

High

• Category: YARA Match
• Confidence: 75% confidence

Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · SKILL.md (reported line 78)May include surrounding context.

��总新闻：X条 | 新增：X条 | 时间：XX:XX 🔥高热度分类：[1/X]分类名（X条）[热度分] 每条新闻格式：1.[平台] 标题 [排名][🔥热度][🆕新增] 链接：https://具体新闻页面链接

text

### 定时任务配置

**方式1：使用OpenClaw Cron**
```yaml
# 每天9:00执行
schedule: "0 9 * * *"

方式2：系统定时任务

bash

# Linux/Mac crontab
0 9 * * * openclaw run-task trending-news

# Windows Task Scheduler
# 每天 9:00 执行

推送渠道配置

支持多种推送渠道（需单独配置）：

• 微信 (weixin): 个人号/群聊推送
• 钉钉 (dingtalk): 群机器人推送
• Slack: 频道消息
• Telegram: 频道/群组
• 邮件: SMTP发送

配置示例：

yaml

push:
  enabled: true
  channels:
    - weixin
    # - dingtalk
    # - slack

输出格式示例

text

===今日热点=== 2026-03-25 09:00
总新闻：32条 | 新增：8条

🔥高热度分类：
[1/5] 科技（12条）[�

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The documented usage trigger phrase, "获取今日热点新闻", is broad and closely matches a normal user request rather than a narrowly scoped invocation. In an agent environment, this can cause accidental activation or routing conflicts, leading the skill to run when the user intended a general query, which increases the chance of unintended web fetching, summarization, or scheduled-task behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The manifest description and the rest of the skill instructions are written as a Chinese-only experience, with no indication that users may choose another language or that the skill is intentionally restricted to a Chinese locale. This can violate language or locale policy when a skill implicitly enforces one language without user opt-in.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The manual trigger phrase "获取今日热点新闻" is broad and closely matches ordinary user conversation, so normal chat requests can unintentionally activate the skill. That increases the chance of unplanned web searches or downstream actions without explicit user intent to invoke this automation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill describes scheduled pushes to external channels and even shows push enabled in configuration, but it does not clearly warn that content will be sent automatically outside the local environment. Users may enable scheduling or push delivery without understanding that recurring outbound delivery to WeChat, Slack, Telegram, or email will occur.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The package description is written only in Chinese ('智能热点新闻聚合器 - 自动抓取多平台热点，AI分析趋势，支持定时推送'), which indicates a language-specific presentation without any visible opt-in or justification in this file. That can violate language/locale policy when the skill does not clearly offer a user choice or document that it is intentionally region-specific.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

This manifest describes the skill only as a generic 'news aggregation and trend analysis' tool with broad automation/monitoring tags, but provides no specific activation phrases, scope limits, or exclusion conditions. In a manifest file, that lack of trigger specificity can cause unintended invocation overlaps with general requests about news, monitoring, or trending topics.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

This markdown file contains user-facing natural language entirely in Chinese, but does not state that the skill is intended for Chinese-speaking users or offer any language/locale choice. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The README description is written only in Chinese, which can indicate a language/locale restriction without user opt-in. The policy for this review flags natural-language language constraints unless the skill offers a choice or clearly documents a justified regional scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

This manifest/config file uses Chinese labels, comments, category names, and push-channel descriptions throughout, with no indication that users can choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Unverifiable Dependency: openclaw has 16 known advisory(ies) (CVE-2026-53846 (OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency); CVE-2026-32064 (OpenClaw's andbox browser noVNC observer lacked VNC authentication); CVE-2026-32006 (OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallbac) +13 more), but the manifest does not pin a version, so it is unknown whether the installed release is affected

Low

• Category: Supply Chain
• Confidence: 91% confidence

Finding

The manifest allows any openclaw version >=2026.3.22, while the dependency family has multiple known advisories and the package does not constrain to a known-fixed release. This creates supply-chain uncertainty: an installation may resolve to a vulnerable host-compatible version, exposing the skill and user environment to inherited platform flaws.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.