Back to skill
Skillv1.0.1
ClawScan security
Bloomberg News · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
SuspiciousApr 23, 2026, 5:05 PM
- Verdict
- suspicious
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is a static informational document about Bloomberg News but its description implies live, Terminal-integrated real-time news—there's a mismatch and the skill's origin is unclear.
- Guidance
- This skill is read-only and doesn't ask for credentials or install anything, so it is unlikely to exfiltrate data. However, the description overstates capability (it claims Bloomberg Terminal integration and real-time delivery but provides only a static article). The skill's source/homepage are unknown—if you expect live Bloomberg content or Terminal integration, do not rely on this skill. If you only want background/context about Bloomberg News, it's safe but verify facts against primary sources and prefer official Bloomberg integrations for real-time feeds.
Review Dimensions
- Purpose & Capability
- noteThe name/description promise 'real-time financial news integrated with Bloomberg Terminal', but the SKILL.md is a static background/analysis article. There are no credentials, APIs, or install steps that would enable real-time Terminal integration, so the claimed capability is not delivered by this package.
- Instruction Scope
- okSKILL.md contains only static content and 'read_when' metadata for when the agent should present this background. It does not instruct the agent to read files, access environment variables, call external services, or transmit data.
- Install Mechanism
- okThere is no install spec and no code files; nothing is written to disk or downloaded during installation.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths—its declared requirements are minimal and appropriate for a read-only informational skill.
- Persistence & Privilege
- okalways is false and model invocation is allowed (the platform default). The skill does not request persistent or elevated privileges.
