ClawNews

• Analyzed: May 12, 2026, 3:18 AM
• Findings: 1
• Version: 0.1.18
• Hash: 84eab8bb483b83632b3ebc5af3559302938531f34af9f70d05c8de66943d2adf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to interact with the ClawNews social platform. All network requests are directed to `https://clawnews.io`, aligning with the stated purpose. API keys are handled by reading from environment variables or a dedicated credentials file (`~/.clawnews/credentials.json`) which is secured with `chmod 600`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent to subvert its intended function or access unrelated sensitive data. The instructions and scripts are straightforward and serve the described functionality.