Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai News Hub

v2.3.1

AI新闻阅读助手。100+ RSS源并发抓取、兴趣评分、跨天去重、统一预取。智能聚合AI/技术新闻、arXiv论文、GitHub热门项目、AI公司动态。支持日报/周报生成、关键词筛选、分类订阅。

0· 36·0 current·0 all-time
bytravelinglight@kingcodingking
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included scripts: rss_aggregator.py, arxiv_papers.py, github_trending.py, summarize_url.py and a rss_sources.json of feeds. Requesting only python3 is coherent for a CLI Python aggregator.
Instruction Scope
Runtime instructions tell the agent to fetch many external RSS endpoints, arXiv, GitHub Trending and optionally call a third‑party 'Jina Reader' (r.jina.ai) to prefetch/parse article content. Those network calls are expected for this skill but mean the agent will make many outbound HTTP requests and (if Jina is used) send article URLs/content to a third party—this is a privacy/telemetry consideration rather than hidden malice.
Install Mechanism
There is no automated install spec (instruction-only). That lowers risk. However _meta.json lists 'feedparser' as a dependency while SKILL.md claims 'pure standard library' — an inconsistency to resolve before assuming zero-install runtime.
Credentials
The skill does not declare or require credentials (good). It does respect HTTP_PROXY/http_proxy and INSTALL.md mentions THREAD_POOL_SIZE, and some files reference optional dependency 'feedparser' — these environment interactions are reasonable but should be noted. No unrelated secrets or system paths are requested.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not attempt to modify other skills or system config. It writes a local cache file (.rss_cache.json) in its script directory which is normal for a feed aggregator.
What to consider before installing
This skill appears to do what it says (aggregate RSS, arXiv, GitHub trending and summarize content), but before installing or enabling it consider the following: - Privacy: summarize_url.py can call r.jina.ai (Jina Reader). If you enable that option the URL/content will be sent to a third‑party service; disable --jina if you want to avoid that. - Outbound network: the aggregator will perform many HTTP requests to feeds and GitHub; run it where that traffic is acceptable and rate-limits are tolerated. - Inconsistencies: metadata lists feedparser as a dependency while SKILL.md claims only stdlib; verify and, if needed, install feedparser or run tests locally. - Incomplete/quirky tests: tests import a module name (rss_aggregator_fast) that doesn't match the main script name; the test suite looks brittle and there are truncated file previews in the package — review the repo files locally to ensure no missing code before relying on it. - Local writes: it writes a cache file (.rss_cache.json) next to the scripts — if you need ephemeral runs, run from a temp directory or container. - Third‑party feed URLs: some entries use raw.githubusercontent.com or other mirrors for RSS feeds; review rss_sources.json and remove any feeds you do not trust. Recommended actions: inspect the repo locally, run the scripts in an isolated environment (container or VM), avoid enabling the Jina Reader option if you care about content confidentiality, and confirm dependency requirements (feedparser) before running in production.

Like a lobster shell, security has layers — review code before you run it.

latestvk970ns252d01r122n8kcjeqvms84vrb6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📰 Clawdis
OSLinux · macOS · Windows
Binspython3

Comments