Ai News Collectors 1.0.0

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a coherent instruction-only AI news gathering skill that browses public sources and has no code, credentials, persistence, or local data access.

This appears safe for public AI news summaries. Expect it to browse multiple public sources and include links; double-check important news items because web content can be incomplete or wrong.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may spend time browsing several public sites and may summarize untrusted or inaccurate web content.

Why it was flagged

The skill explicitly directs repeated web searches and page fetching. This is expected for a news aggregation skill, but it is still external tool use against public web content.

Skill content
多维度分层搜索(最少 8 次,建议 10-12 次)... 发现周报后,用 web_fetch 获取全文
Recommendation

Use it for public news gathering, and verify important claims against the linked sources before relying on them.

What this means

The skill's origin is not fully clear, although there is no code or install step that would run on the user's machine.

Why it was flagged

The embedded metadata differs from the registry owner/slug shown in the evaluation header, and the listing provides no source homepage. Because the skill is instruction-only with no executable code, this is a provenance note rather than a behavioral concern.

Skill content
"ownerId": "kn7fr165ff9vkkwsqyqrq2nwas80t4ev", "slug": "ai-news-collectors"
Recommendation

If provenance matters, confirm the publisher before installing; otherwise the artifact itself does not show unsafe install behavior.