Miniflux News

• Analyzed: May 14, 2026, 3:03 AM
• Findings: 1
• Version: 0.1.0
• Hash: b304f1c88bbba8d2584213c571e3a52e54752eaed55cdc4dc13dc34d4eaa3d8b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is benign, designed to interact with a Miniflux RSS reader API. It handles credentials appropriately from a dedicated config file (`~/.config/clawdbot/miniflux-news.json`) or environment variables, without attempting to access unrelated sensitive files or exfiltrate data. The `SKILL.md` explicitly includes a strong safety instruction to the agent, stating that it 'must never mark anything as read implicitly' and requires explicit user confirmation for destructive actions, which is reinforced by a `--confirm` flag in the `miniflux.py` script. The Python script uses only the standard library and performs controlled HTTP requests to the Miniflux API, with no evidence of malicious execution patterns or obfuscation.