News Summary
PassAudited by VirusTotal on May 13, 2026.
Overview
Type: OpenClaw Skill Name: news-summary Version: 1.0.1 The skill bundle is benign. It fetches news from legitimate RSS feeds (BBC, Reuters, NPR, Al Jazeera) using `curl` and processes the content with standard Unix tools (`grep`, `sed`, `head`). It also uses the `$OPENAI_API_KEY` to interact with the OpenAI TTS API for voice summaries, which is a legitimate use case for the skill's stated purpose. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in SKILL.md.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If voice summaries are used, the agent may rely on the user's OpenAI API credentials and incur API usage under that account.
The skill optionally uses an OpenAI API key for text-to-speech, but the registry metadata declares no required or optional environment variables.
-H "Authorization: Bearer $OPENAI_API_KEY"
Use a limited API key if available, monitor OpenAI usage, and only enable voice generation when you are comfortable sending the generated news summary to OpenAI.
The agent may access external news and API endpoints when summarizing current events.
The skill instructs the agent to make network requests with curl to fetch RSS feeds. This is central to the stated news-summary purpose and uses named public news sources.
curl -s "https://feeds.bbci.co.uk/news/world/rss.xml"
Review the listed sources if source selection matters, and ask the agent to cite sources for important or sensitive news summaries.