opennews

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward instruction-only skill for querying the OpenNews crypto news API, with expected use of an API token and no hidden code or persistence shown.

This skill appears safe to install if you trust the OpenNews/6551 service. Protect your OPENNEWS_TOKEN, verify the token page and API domain, and treat AI ratings or trading signals as informational rather than financial advice.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone or any process with this token may be able to use the user's OpenNews API access.

Why it was flagged

The skill needs a service credential to access the OpenNews API. This is purpose-aligned and disclosed, but the token grants account/API access and should be handled carefully.

Skill content
All endpoints require a Bearer token via `$OPENNEWS_TOKEN`.
Recommendation

Only set OPENNEWS_TOKEN for the intended OpenNews account, avoid sharing logs or command output that may reveal it, and rotate the token if it is exposed.

What this means

Search keywords, coin filters, and related request metadata may be visible to the OpenNews/6551 service.

Why it was flagged

The skill sends search terms and filters to an external provider endpoint. This is the core purpose of the skill and is clearly disclosed, but users should recognize that their queries leave the local environment.

Skill content
curl -s -X POST "https://ai.6551.io/open/news_search" ... -d '{"q": "bitcoin ETF", "limit": 10, "page": 1}'
Recommendation

Use the skill only with queries you are comfortable sending to the OpenNews provider, and verify the provider before using a token.