News Source Manager (信息源管理器)
Analysis
This instruction-only skill appears benign; it saves your news preferences locally and lets a news briefing skill reuse them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
用户确认后写入 `news-sources.json` ... 用户确认后设置 `active: false`(或删除)
The skill tells the agent to modify a local configuration file, including disabling or deleting categories, but the changes are scoped to the news preferences file and require user confirmation.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
Stores in: `~/.openclaw/workspace/memory/news-sources.json` ... `insight-radar` 加载配置时调用
The skill stores persistent user news preferences and exports active categories for another news briefing skill to use, which is disclosed and purpose-aligned.
