财联社自定义新闻日报
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only skill coherently uses a browser to fetch public 财联社 news, with disclosed setup and optional scheduling items users should review.
This skill appears benign for fetching and formatting public 财联社 news. Before installing, confirm you trust the `agent-browser` dependency, prefer manual installation if possible, and only add the optional cron configuration if you want the task to run automatically on a schedule.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or running the skill may add another OpenClaw tool to the environment before the news workflow can run.
The skill is instruction-only but tells the agent/system to install an additional browser tool if missing. This dependency is purpose-aligned and disclosed, but it is not represented as an install spec or pinned dependency.
本技能依赖 **agent-browser** 工具，如果尚未安装，系统会自动尝试安装: ... runCommand("clawhub install agent-browser")Review and, if possible, install `agent-browser` manually from a trusted source before using the skill; avoid approving unexpected package/tool installs.
If the user adds this cron entry, the agent may automatically run the news task on the configured schedule.
The artifact documents an optional scheduled task that can repeatedly invoke the skill. It is disclosed and user-configured, but it creates ongoing automated activity if enabled.
"cls-robot-news": { "enabled": true, ... "schedule": { "kind": "cron", "expr": "0 9,30 17 * * 1-5" ... }, ... "message": "执行财联社机器人新闻自动化任务" }Only enable the cron entry if recurring execution is desired, verify the schedule expression, and disable it when no longer needed.