Ai Research Scraper

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to be a benign AI-news lookup helper, but users should verify its external Tavily dependency/API-key handling and note that some documented options are not implemented in the shown code.

Before installing, make sure you are comfortable running a Python script that invokes a separate tavily-search skill and may use third-party search/translation APIs. Review the Tavily dependency and any API keys you provide, and do not rely on the documented website-list or CLI options for strict scoping unless you modify or verify the script.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The results and network behavior depend on the separate tavily-search skill; if that skill is missing, changed, or configured differently, this skill may behave differently than expected.

Why it was flagged

The main scraper depends on a hard-coded script from another skill and Node. That dependency is outside this package's shown source/install spec, although it is aligned with the stated search purpose.

Skill content
subprocess.run([ 'node', '/root/.openclaw/workspace/skills/tavily-search/scripts/search.mjs', 'AI product development', '-n', '10', '--topic', 'news' ], ...)
Recommendation

Review and install the tavily-search dependency separately, confirm any credentials it uses, and prefer clearly declared/pinned dependencies.

What this means

If you provide API keys, those keys may grant access to your provider account or quota for the related service.

Why it was flagged

The reference docs mention third-party API keys for optional provider integrations. This is expected for search/translation services, and the supplied code shows placeholders rather than hardcoded real secrets.

Skill content
Google Cloud Translation API需要以下配置:- API密钥 ... Tavily Search API需要以下配置:- API密钥
Recommendation

Use scoped, revocable keys; avoid pasting real secrets directly into scripts; and check provider permissions before enabling optional integrations.

What this means

Editing websites.txt or passing the documented options may not actually limit sources, date range, topic, or output size in the shown script.

Why it was flagged

The documentation advertises configurable sites and command-line options, while the supplied main scraper uses a fixed Tavily news query and does not parse these options. This is a capability/scoping mismatch rather than harmful behavior.

Skill content
编辑 `references/websites.txt` 文件,添加或删除目标网站 ... scraper.py --max-tokens 500 ... --days 7 ... --topic product-development
Recommendation

Treat the documentation as incomplete; inspect or update the script if you need strict source scoping, token limits, date filters, or topic controls.