Toutiao Hot News CN | 今日头条热榜

• Analyzed: May 12, 2026, 4:13 AM
• Findings: 0
• Version: 1.0.0
• Hash: 99dc1a4b6e2dc26a4c08bf364c56879eddd4bdf40e135704c10bd00df5f4c02a
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: toutiao-hot-news-cn Version: 1.0.0 The skill bundle is designed to fetch hot news from Toutiao. The `SKILL.md` provides clear, non-malicious instructions for the AI agent to execute a Node.js script. The `scripts/toutiao.cjs` script uses built-in Node.js modules (`https`, `zlib`) to make HTTP GET requests to a hardcoded URL (`https://www.toutiao.com/hot-event/hot-board/`). It processes the JSON response and outputs structured data. There is no evidence of data exfiltration, arbitrary command execution, file system access, persistence mechanisms, or prompt injection attempts against the agent. The script's functionality is entirely aligned with its stated purpose.