ClawHub

Crypto News Ranked by AI

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a documentation-only crypto news skill that makes disclosed calls to NS3 news feeds and does not install code, persist, or access credentials.

Install this only if you are comfortable with your agent contacting NS3 for crypto news and sending requested coin symbols, language, and filter preferences to that service. Keep use limited to explicit crypto news or market briefing requests, and avoid sending balances, wallet details, account data, or private portfolio context.

SkillSpector (31)

By NVIDIA

Vague Triggers

Medium
Confidence
83% confidence
Finding
The skill description explicitly says to use the skill for 'portfolio updates,' which is broader than pure crypto-news retrieval and can cause the agent to activate on sensitive finance-related requests that may include holdings, balances, or account context. That over-broad trigger surface increases unnecessary external data access and can steer the conversation into trading-oriented outputs beyond a clear user request for news.

Natural-Language Policy Violations

Low
Confidence
71% confidence
Finding
The skill instructs automatic language selection based on the user's language, which can change request parameters and downstream content without explicit confirmation. While not a severe security flaw by itself, it can create privacy and UX issues by transmitting inferred language preferences to the third-party service and returning content in a form the user did not explicitly request.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger-routing table uses very broad, natural-language prompts such as 'top stories,' 'catch me up,' and portfolio/news requests without defining strict activation conditions or user-consent boundaries. In an agent environment, this can cause the skill to activate on common requests and steer the agent into calling an external service even when the user did not explicitly ask to use NS3, creating overreach and unintended data flow.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The installation text says the agent will 'start using NS3 feeds immediately,' which encourages automatic activation without clarifying scope, permission, or when the skill should remain dormant. That increases the chance of unsolicited external requests and hidden dependency on a third-party feed during ordinary conversation.

External Transmission

Medium
Category
Data Exfiltration
Content
Replace `lang=en` with the target language code in any feed URL. Example:
```bash
# English
curl -s "https://api.ns3.ai/feed/news-data?lang=en"
# Korean
curl -s "https://api.ns3.ai/feed/news-data?lang=ko"
# Japanese
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# English
curl -s "https://api.ns3.ai/feed/news-data?lang=en"
# Korean
curl -s "https://api.ns3.ai/feed/news-data?lang=ko"
# Japanese
curl -s "https://api.ns3.ai/feed/news-data?lang=ja"
```
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# Korean
curl -s "https://api.ns3.ai/feed/news-data?lang=ko"
# Japanese
curl -s "https://api.ns3.ai/feed/news-data?lang=ja"
```

## When to Use Which Feed
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
# Best: specific coin + important only + limit (recommended)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=SOL&excludeLevels=3,4&limit=20"

# Good: specific coin + exclude routine + limit
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=4&limit=20"
Confidence
96% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=SOL&excludeLevels=3,4&limit=20"

# Good: specific coin + exclude routine + limit
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=4&limit=20"

# Acceptable: specific coin + all levels (use only when the user explicitly requests all news including routine items)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=ETH"
Confidence
96% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=4&limit=20"

# Acceptable: specific coin + all levels (use only when the user explicitly requests all news including routine items)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=ETH"
```

Base URL:
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
Base URL:
```bash
curl -s "https://api.ns3.ai/feed/news-data?lang=en&limit=20"
```

### Filters
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**limit** (integer, 1-100, default 100): Controls how many items are returned. Recommended: `limit=20` for most requests.
```bash
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeLevels=4&limit=20"
```

**Token filter** (multi): Returns only news related to a specific token. The `crypto` parameter supports approximately the top 1,500 coins by CoinMarketCap ranking. Coins outside this range may return no results even if news about them exists in the feed.
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**Token filter** (multi): Returns only news related to a specific token. The `crypto` parameter supports approximately the top 1,500 coins by CoinMarketCap ranking. Coins outside this range may return no results even if news about them exists in the feed.
```bash
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&limit=20"
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=ETH&limit=20"
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=SOL,BNB&limit=20"
```
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**Token filter** (multi): Returns only news related to a specific token. The `crypto` parameter supports approximately the top 1,500 coins by CoinMarketCap ranking. Coins outside this range may return no results even if news about them exists in the feed.
```bash
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&limit=20"
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=ETH&limit=20"
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=SOL,BNB&limit=20"
```
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&limit=20"
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=ETH&limit=20"
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=SOL,BNB&limit=20"
```

If crypto filter returns no results, the coin may not have recent coverage from NS3's monitored sources. This does not improve with higher limit values (limit only controls how far back in time results go). Suggest the user check the coin's official community channels (X/Twitter, Discord, Telegram) for project-specific updates.
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**News type filter** (single value): Returns only articles of a specific type.
```bash
# Level 2 articles only
curl -s "https://api.ns3.ai/feed/news-data?lang=en&newsType=important&limit=20"
```

**Exclude levels** (multi): Removes articles at specific importance levels.
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**Exclude levels** (multi): Removes articles at specific importance levels.
```bash
# Remove routine (Level 1-3 only)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeLevels=4&limit=20"
# Level 1-2 only
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeLevels=3,4&limit=20"
```
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# Remove routine (Level 1-3 only)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeLevels=4&limit=20"
# Level 1-2 only
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeLevels=3,4&limit=20"
```

**Exclude sources** (multi): Removes articles from specific media outlets by source ID.
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**Exclude sources** (multi): Removes articles from specific media outlets by source ID.
```bash
# Exclude CoinMarketCap (ID 3)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeSources=3&limit=20"
# Exclude multiple sources
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeSources=1,2&limit=20"
```
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# Exclude CoinMarketCap (ID 3)
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeSources=3&limit=20"
# Exclude multiple sources
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeSources=1,2&limit=20"
```

Source IDs: 1 Cointelegraph, 2 CoinDesk, 3 CoinMarketCap, 4 Watcher.Guru, 5 The Daily Hodl, 6 BeInCrypto, 7 Decrypt, 8 The Block, 9 Bloomberg Crypto, 10 Forbes Crypto, 11 Reuters Crypto, 12 Fortune Crypto, 13 CoinNess, 14 Odaily, 15 CryptoSlate, 16 Bitcoin Magazine, 17 DL News, 18 The Defiant, 19 Protos, 20 Wu Blockchain.
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**Exclude categories** (multi): Removes articles in specific topic categories.
```bash
# Exclude exchange operations news
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeCategories=6&limit=20"
# Exclude general and exchange operations
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeCategories=5,6&limit=20"
```
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# Exclude exchange operations news
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeCategories=6&limit=20"
# Exclude general and exchange operations
curl -s "https://api.ns3.ai/feed/news-data?lang=en&excludeCategories=5,6&limit=20"
```

Category IDs: 1 Market Trends, 2 Regulation & Policy, 3 Institutional Updates, 4 Market Outlook & Expert Views, 5 General, 6 Exchange & Venue Operations, 7 Macro & Geopolitical, 8 Security & Incidents.
Confidence
94% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
**Combined filters**: Multiple parameters can be combined.
```bash
# Important BTC news only (recommended for "BTC important news")
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=3,4&limit=20"
# BTC news excluding routine items
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=4&limit=20"
# Important ETH news in Korean
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# Important BTC news only (recommended for "BTC important news")
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=3,4&limit=20"
# BTC news excluding routine items
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=4&limit=20"
# Important ETH news in Korean
curl -s "https://api.ns3.ai/feed/news-data?lang=ko&crypto=ETH&excludeLevels=3,4&limit=20"
```
Confidence
95% confidence
Finding
https://api.ns3.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
# BTC news excluding routine items
curl -s "https://api.ns3.ai/feed/news-data?lang=en&crypto=BTC&excludeLevels=4&limit=20"
# Important ETH news in Korean
curl -s "https://api.ns3.ai/feed/news-data?lang=ko&crypto=ETH&excludeLevels=3,4&limit=20"
```

### Response (RSS XML, up to 100 items. Use `limit` to reduce.)
Confidence
95% confidence
Finding
https://api.ns3.ai/

Static analysis

No static analysis findings were reported for this release.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal