Daily Tech

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill fetches public tech news and can create a user-triggered daily Feishu push; the behavior is disclosed and aligned with its stated purpose.

This appears safe for its stated purpose. Before enabling scheduled delivery, make sure you want a persistent daily Feishu message and know how to disable the cron job if needed.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may contact third-party news sites to assemble the digest.

Why it was flagged

The skill instructs the agent to fetch content from named external news and RSS sources. This is expected for a news digest and does not show hidden or unrelated tool use.

Skill content
web_fetch("https://tophub.today/n/rYqoXz8dOD", { maxChars: 3000 }) ... web_fetch("https://techcrunch.com/feed/", { maxChars: 3000 })
Recommendation

Use it if you are comfortable with the agent fetching from the listed public sources.

What this means

If enabled, the agent will continue sending a daily Feishu message until the schedule is removed or disabled.

Why it was flagged

The skill can create a recurring scheduled agent action that posts a daily digest to Feishu. This persistence is disclosed and tied to the stated push-notification purpose.

Skill content
openclaw cron add --name "每日科技推送" --agent main --message "今日科技" --cron "0 7 * * *" --tz "Asia/Shanghai" --channel feishu
Recommendation

Only enable the scheduled push if you want recurring Feishu posts, and confirm you know how to remove the cron job later.