Daily News Digest

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only news digest skill is coherent and purpose-aligned, with disclosed use of local preference memory, external news/TTS providers, and optional scheduled delivery.

Before installing, decide whether you are comfortable with local storage of your news interests, geography, schedule, and delivery channel, and with optional external search/TTS providers receiving query or briefing text. If you enable scheduled delivery, confirm the channel and know how to cancel it.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Future news briefings will be shaped by stored preferences, and the local memory file may reveal interests, geography, and schedule choices.

Why it was flagged

The skill persistently records user preferences, location context, and delivery settings for future briefings.

Skill content
After each response, update `~/daily-news-digest/memory.md`: ... Topic interests and exclusions ... Geography ... Schedule and delivery channel
Recommendation

Review or edit `~/daily-news-digest/memory.md` periodically, and avoid storing sensitive personal details if you do not want them reused.

What this means

Search queries may reveal news interests or location, and voice mode may send the briefing text to ElevenLabs.

Why it was flagged

The skill discloses sending search queries and optional briefing text to external providers, which is expected for search and text-to-speech but is still an external data boundary.

Skill content
| Brave Search API | Query text | Trending/breaking news | ... | ElevenLabs TTS (optional) | Briefing text | Voice synthesis |
Recommendation

Use voice/search integrations only if you trust the configured providers, and keep sensitive personal details out of news preferences and briefing text.

What this means

Scheduled briefings may continue to be delivered to the selected channel until the schedule is changed or canceled.

Why it was flagged

The skill can create recurring automated briefing jobs, but the documented workflow requires user confirmation and records the schedule.

Skill content
Agent action:
1. Confirm time and channel
2. Create cron job via OpenClaw
3. Log schedule in memory.md
Recommendation

Confirm the time, timezone, and delivery channel before enabling schedules, and use the documented list/modify/cancel flows when needed.

What this means

News search, voice synthesis, or delivery may use connected provider accounts, quotas, or channel permissions configured in OpenClaw.

Why it was flagged

The skill may rely on platform-managed provider credentials and messaging-channel integrations even though it declares no required environment variables.

Skill content
Credential handling: Brave Search and ElevenLabs credentials are managed by OpenClaw platform configuration... Scheduled deliveries use OpenClaw's built-in channel integrations.
Recommendation

Check which OpenClaw credentials and delivery channels are enabled, and revoke or disable integrations you do not want this skill to use.