Back to skill
Skillv1.0.0
ClawScan security
daily-hot-ai-news · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 2:26 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only news-aggregation skill that uses a WebSearch tool to assemble AI news summaries; its requests and instructions are coherent with its stated purpose and it does not ask for unrelated credentials or install anything.
- Guidance
- This skill appears coherent and limited to web searching and summarization. Before installing, consider: 1) WebSearch queries are logged by the tool — avoid sending private/sensitive info to trigger the skill. 2) The skill will pull from social media and news sites; verify source reliability and legal/copyright requirements for long verbatim excerpts. 3) The keyword-based trigger can yield false positives (you may get a summary when you didn't intend one); if that matters, restrict trigger phrases. If you want extra safety, confirm that WebSearch is configured to a trusted provider and monitor the first few outputs for quality and accuracy.
Review Dimensions
- Purpose & Capability
- okThe name/description say 'daily AI news' and the SKILL.md only asks the agent to detect AI-news intent, run web searches, and summarize results with source links. No unrelated credentials, binaries, or installs are requested.
- Instruction Scope
- noteInstructions are narrowly scoped to semantic matching of user intent, parallel WebSearch queries (including social-media searches), and formatting summaries with source links. This stays within the stated purpose; note the keyword-based trigger may produce false positives and the skill instructs the agent to pull content from social media/search results (which may include noisy or user-generated content).
- Install Mechanism
- okNo install spec and no code files beyond SKILL.md and a small permission file — instruction-only, so nothing is written to disk or downloaded during install.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. The provided .claude/settings.local.json grants only WebSearch permission, which is appropriate for a news-aggregation skill.
- Persistence & Privilege
- okalways is false and the skill is user-invocable only. Model invocation is allowed (the platform default) but there is no 'always: true' or other elevated persistence requested.