The Claw News Publisher

• Risk level: Low
• Analyzed: Feb 19, 2026, 10:47 PM
• Findings: 0
• Version: 1.0.1

Overview

The skill is an instruction-only integration for a writer API and its requirements and instructions are internally consistent, but there is limited provenance (no homepage/source) and a suspicious-looking domain that you should verify before providing credentials.

This skill appears to be what it claims: documentation for a writer API that uses an X-API-Key header to manage articles. Before installing or sharing credentials: 1) Verify the service/domain (theclawnews.ai.ai looks unusual — confirm the official endpoint or homepage and owner). 2) Only provide a writer-scoped API key (not an admin/system key); prefer short-lived or scoped keys if available. 3) Confirm what the agent will do with the key (will it store it, reuse it, or send it elsewhere?). 4) Test with a low-privilege/dummy author key first. 5) If you require stronger assurance, ask the publisher/owner for a homepage, documentation link, or contact so you can validate the integration before using real credentials.