AI News Feed API

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward instruction-only skill for querying an AI news API, with the main thing to notice being that it needs the user's RapidAPI key.

This skill appears benign and narrowly scoped to fetching AI news from RapidAPI. Before installing, make sure you are comfortable using a RapidAPI key, store that key securely, and monitor any API usage or quota associated with your RapidAPI account.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When used, the agent may contact RapidAPI to fetch AI news, using API quota and sending the selected query parameters to that service.

Why it was flagged

The skill directs the agent to call a disclosed external API host. The endpoints are read-only and purpose-aligned with retrieving AI news.

Skill content
**Base URL**: `https://twitter-ai-news-feed.p.rapidapi.com`
Recommendation

Use it only for AI news queries, review RapidAPI subscription terms and rate limits, and ensure requests go only to the documented RapidAPI host.

What this means

A RapidAPI key is a sensitive credential; if exposed or mishandled, it could allow others to use the user's API quota or account-linked subscriptions.

Why it was flagged

The skill requires a user-owned RapidAPI key and suggests persisting it for future use, even though the registry metadata declares no required credential or environment variable.

Skill content
`X-RapidAPI-Key: <user's own key from step 3>` ... `Store the key for future use (e.g. in an environment variable RAPIDAPI_KEY)`
Recommendation

Store the key only in a trusted secret or environment-variable mechanism, do not paste it into public chats or files, and rotate it if it may have been exposed.