Hackernews Cn

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears low-risk, but its included script returns mock Hacker News data rather than the live API data described.

This skill looks safe from a security perspective, but do not rely on its output as live Hacker News data unless you confirm it has been updated to use the real APIs.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

The skill may give example or fabricated-looking Hacker News results instead of current real stories.

Why it was flagged

The implementation explicitly uses mock data, while SKILL.md describes current Hacker News monitoring and lists Hacker News Official API and Algolia HN Search API as data sources. Users could mistakenly trust the output as live HN results.

Skill content

def get_hn_top(limit=10):
    """获取 HN Top Stories（使用模拟数据）"""
    mock_stories = [

Recommendation

Treat results as demo data unless the skill is updated to call the documented HN APIs, and verify important HN information directly from Hacker News or Algolia.