News Fetcher (by luogao)
Security checks across malware telemetry and agentic risk
Overview
This skill appears purpose-aligned for fetching public news and archives, with documented external service use and a small local preference file.
This looks safe for its intended use: fetching and summarizing public news. Before installing, be aware that optional Tavily searches use your Tavily API key, external archive/search services may receive the URLs or search terms you request, and news preferences are saved in CONFIG/news-preferences.md.
VirusTotal
65/65 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured, the Tavily API key will be used for news searches and sent to Tavily as an authorization token.
The script uses an optional Tavily credential to authenticate to Tavily's search API, which is expected for the advertised alternative-source search feature.
const TAVILY_API_KEY = process.env.TAVILY_API_KEY; ... 'Authorization': `Bearer ${TAVILY_API_KEY}`Set TAVILY_API_KEY only if you want Tavily search enabled, and use a key with normal service-level limits rather than a broadly privileged credential.
News URLs and search terms may be visible to external services such as Tavily, archive.today, Wayback Machine, or r.jina.ai.
The skill intentionally sends article URLs or search queries to third-party archive/search services as part of its core workflow.
archive.today / Wayback Machine ... 使用 Tavily API 搜索同一事件的免费报道
Use the skill for public news links and avoid giving it private, intranet, or sensitive URLs unless you are comfortable sharing them with those services.
Stored preferences can influence future news results, and anyone who can modify that workspace file could steer what sources or categories are used.
The skill persists user news preferences in a workspace file and reads them later to guide news selection.
检查配置文件 `CONFIG/news-preferences.md` ... 保存偏好 → 写入 `CONFIG/news-preferences.md`
Review or edit CONFIG/news-preferences.md if results seem unexpected, and avoid storing sensitive personal details in the preference file.