Ruiping

PassAudited by VirusTotal on May 5, 2026.

Overview

Type: OpenClaw Skill Name: ruiping-skill Version: 2.0.4 The skill bundle is a news commentary tool designed to analyze and format news reports into a specific 'sharp' style. The Python scripts (scripts/ruiping.py and references/demo.py) are simple utility scripts that handle local file I/O for reading news events and saving reports, while the SKILL.md provides persona-based instructions for the AI agent to ensure consistent output formatting. No malicious logic, data exfiltration, or harmful prompt injections were identified.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may search the web for current topics and base commentary on retrieved sources.

Why it was flagged

The skill directs the agent to use an external search tool when the user asks for recent news; this is disclosed and aligned with the news-analysis purpose, but web results are untrusted inputs.

Skill content
1. 先用 `search_web` 搜索最新动态
Recommendation

Check cited sources and avoid treating search-derived commentary as verified fact without review.

What this means

Users could over-rely on confident commentary for financial, work, or personal decisions.

Why it was flagged

The skill intentionally pushes decisive language and concrete investment-style recommendations. This is part of its stated purpose, but it can sound more certain than the evidence supports.

Skill content
结论要犀利,不能模棱两可 ... 如果你是投资者:[具体方向、关联标的、时间窗口]
Recommendation

Treat outputs as opinionated analysis, verify facts independently, and consult qualified advice before making financial decisions.

What this means

Manual dependency installation could pull a newer package version than the author tested.

Why it was flagged

The dependency is lower-bounded rather than pinned. No install spec auto-installs it, so this is a minor hygiene note for users who manually install requirements.

Skill content
requests>=2.28.0
Recommendation

Pin dependency versions or remove unused requirements if maintaining or auditing the skill.