Back to skill
Skillv1.0.0

VirusTotal security

Latte News Fetcher · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:12 AM
Hash
b20dabaeb822f1e920a0e92bba717dd45e78ba79ab22c23341c1c115f6dae8ef
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: latte-news-fetcher Version: 1.0.0 The skill bundle provides extensive functionality for aggregating news and bypassing paywalls using third-party services like archive.today, smry.ai, and 12ft.io. While the behavior is aligned with the stated purpose, it is classified as suspicious due to high-risk instructions in SKILL.md and README.md that direct the AI agent to use the user's browser profile (profile='chrome') to leverage authenticated sessions for membership-based sites. Additionally, the scripts/fetch_news.mjs script and SKILL.md instructions involve automated browser control and network requests to multiple external bypass services, which represent significant capabilities for bypassing access controls and interacting with sensitive browser data.
External report
View on VirusTotal