Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

eden-digital-web3-weekly-digest-yang

v8.0.0

自动抓取数据并生成 Web3 行业资本运作周报,涵盖融资事件、监管动态、上市公司 DAT 动态、并购交易与 RWA 项目追踪。当用户提到"写周报"、"生成周报"、"整理本周融资"、"Web3 周报"、"资本运作周报"、"采编周报",或请求整理加密行业本周动态时,立即激活此 skill。即使用户只说"帮我写本周的"...

0· 140·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (automatically fetch Web3 news and generate a weekly digest) aligns with the code: the scripts fetch TechFlow RSS, Rootdata fundraising, CoinGlass/Coinglass (via Playwright), Cryptorank RWA and assemble a report. No unrelated credentials are requested. Minor inconsistency: SKILL.md metadata only lists curl and python3 as required binaries, but one module (scripts/part5_fetch.py) requires Playwright (a Python package + browser install), which is not declared.
Instruction Scope
SKILL.md instructs running run_all.py (or module scripts) to scrape public sources and then mandatorily pass the generated skeleton plus a fixed prompt to an AI to 'fill ⚠️ fields'. That step will transmit the scraped skeleton to the agent/LLM for completion — expected for this skill but important to note as the primary data exfiltration vector (scraped public content will be sent to the LLM). The instructions do not ask for unrelated files, env vars, or system config.
!
Install Mechanism
There is no install spec, but scripts require extra runtime components not declared in SKILL.md: part5_fetch.py imports playwright and prompts the user to run 'pip install playwright && playwright install chromium'. This is a non-trivial dependency (downloads browsers, writes to disk) and is not called out in the declared requirements. No other unusual download URLs are present; the scrapers use public APIs and curl.
Credentials
The skill requests no environment variables, no credentials, and no config paths. All network calls go to public endpoints (techflowpost, rootdata, coinglass, cryptorank, open.er-api.com, panewslab, coingecko mentioned). There are no hidden SECRET/TOKEN env requirements. This is proportionate to the stated purpose.
Persistence & Privilege
always:false and the skill does not request persistent platform privileges or modify other skills. The skill does instruct the agent to automatically use an LLM prompt to complete the report (normal for autonomous skills), but that alone is not elevated privilege.
What to consider before installing
What to consider before installing: - Dependency surprise: part5_fetch.py requires Playwright (Python package + browser install). SKILL.md only lists curl and python3. If you run the script you may need to install Playwright and Chromium which will download and write browser binaries — install in a controlled environment or sandbox. - Data flow: the workflow scrapes public websites, then Step 5 mandates sending the report skeleton and a fixed prompt to an AI to 'fill' missing fields. That means scraped content will be transmitted to whichever LLM/service the agent uses. If your agent uses an external model (cloud provider), review privacy/PII concerns and terms before sending scraped data. - No secrets requested: the skill does not ask for API keys or other credentials, and it only calls public endpoints. That reduces risk but does not eliminate it — scraped content could still contain sensitive info. - Review and sandbox: run the scripts in a sandbox or isolated environment first to confirm behavior, especially Playwright's browser installs. Inspect network traffic if you need to verify endpoints. - If you need offline or strictly local operation: remove/modify the mandatory AI completion step (Step 5) so the agent doesn't auto-send content to remote models, or ensure the agent uses a trusted/local model. - If anything is unclear: ask the skill author for a clear dependency list (exact pip packages and 'playwright install' steps) and confirm where AI completion runs (local vs external model).

Like a lobster shell, security has layers — review code before you run it.

latestvk972q2sqzbxdr1scq7aqet3phx83qnap

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments