Back to skill
Skillv1.0.0

ClawScan security

Fox News Monitor · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 6, 2026, 3:12 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill's requested binaries, config path, and runtime instructions align with its stated purpose of monitoring Fox News feeds and saving local preferences; nothing in the package indicates unexplained access or hidden endpoints.
Guidance
This skill appears internally consistent for Fox News monitoring: it will make HTTP requests to publicly available Fox endpoints and may create files under ~/fox-news/ (memory.md, sources.md, briefs/, etc.). Before installing, decide whether you are comfortable with those web requests and local files. You can inspect the provided SKILL.md, setup.md, and memory-template.md to confirm what will be written and to verify confirmation prompts are respected. If you prefer, run it initially only interactively (not letting the agent call it autonomously) and review any created files before enabling automated, recurring monitoring.

Review Dimensions

Purpose & Capability
okName/description (Fox News monitoring) match requirements: curl and python for fetching/parsing public RSS/pages and a local config path ~/fox-news/ for storing preferences and briefings are proportionate and expected.
Instruction Scope
okSKILL.md restricts activity to reading public Fox News pages/RSS and storing only user-approved preferences and archived briefings; it explicitly forbids requesting credentials and requires confirmation before bulk operations or saving content, which keeps scope focused.
Install Mechanism
okInstruction-only skill with no install spec or remote downloads — lowest-risk model: it relies on existing curl/python on PATH and creates a local ~/fox-news/ directory per user consent.
Credentials
okNo environment variables or external credentials are requested; the single config path asked for (~/fox-news/) is appropriate for persisting preferences and archives and is documented in the skill files.
Persistence & Privilege
okalways is false, the skill stores only its own local memory under ~/fox-news/ with explicit user confirmation required for saves/archiving; it does not request system-wide changes or modify other skills.