AI Frontier Monitor
PassAudited by ClawScan on May 9, 2026.
Overview
This skill appears to do what it says: fetch public AI-news sources, generate a briefing, optionally send it to Feishu, and store local briefing data.
Before installing, confirm you are comfortable with the skill running bundled scripts, fetching public web sources, storing archives under its data directory, and optionally sending the generated briefing to Feishu. Verify the delivery target and dependencies, especially because the registry source/homepage and install metadata are sparse.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill is not shown to be malicious, but its origin and dependency setup are not fully described in registry metadata.
The skill includes runnable scripts but has no homepage/source provenance or install specification, so users should review the included code and dependency expectations before running it.
Source: unknown; Homepage: none ... No install spec — this is an instruction-only skill. Code file presence: 4 code file(s)
Review the bundled scripts and ensure Python, feedparser, bash, and curl are available before use.
Using the skill can run local Python/bash code and make network requests as part of collecting briefing data.
The briefing generator runs bundled shell scripts for arXiv/GitHub fetching. The visible code uses fixed script paths and no shell=True, making this purpose-aligned local execution rather than suspicious execution.
subprocess.run(['bash', str(script_path)] + list(args), capture_output=True, text=True, timeout=timeout)
Use it only if you are comfortable running the bundled scripts; keep the scripts scoped to the skill directory and avoid passing untrusted custom arguments.
Briefings may be sent outside the current chat to a Feishu user or workspace if that delivery path is used.
The skill can send the generated briefing through an external messaging channel. This is disclosed and purpose-aligned, but users should confirm the Feishu recipient and workspace.
**Push to Feishu** — 通过 `message` 工具发送到飞书（channel: feishu, to: user ID）
Configure and verify the Feishu user ID before enabling push delivery, and avoid including private material in briefing inputs unless intended.
The skill leaves local briefing archives and source-state files under its data directory.
The skill persists fetched candidates, generated briefings, and RSS state locally. This is expected for archiving and deduplication, but retained external content could influence future briefings.
All runtime data is stored under `{baseDir}/data/` ... candidates ... briefings ... rss-state.jsonPeriodically review or clear `{baseDir}/data/` if you do not want historical briefing data retained.