Industry News Agent
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward RSS news-fetching skill, with disclosed outbound feed requests and an optional daily schedule.
This skill looks safe for its stated RSS news-tracking purpose. Before installing or running it, review the configured RSS sources and only enable the daily cron schedule if you actually want ongoing background checks.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When run, the skill will make web requests to the RSS feeds listed in its configuration.
Running the script contacts configured RSS sources over the network. This is purpose-aligned for a news-fetching skill, but it means the configured sites receive request metadata.
with urllib.request.urlopen(req, timeout=15) as response:
Review config.yaml and only add RSS feed URLs you trust or are comfortable contacting.
If enabled, the skill can run every day and fetch RSS feeds even when you are not manually invoking it.
This optional setup creates a persistent daily cron job. It is clearly documented and user-run, but it remains active until removed.
(crontab -l 2>/dev/null; echo "0 9 * * * python3 ~/.openclaw/workspace/skills/industry-news-agent/scripts/fetch_news.py") | crontab -
Only enable the cron job if you want daily background execution, and remove it from crontab when no longer needed.