Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Daily Business Report

v1.0.0

Generate daily business briefings from multiple data sources. Aggregates weather, crypto prices, news headlines, system health, and calendar events into a fo...

0· 567·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (daily business briefing) matches the included script: it fetches weather (wttr.in), crypto (CoinGecko), quotes, optional NewsData.io headlines, and local system stats. Minor mismatch: README/promotional text mentions sending reports via WhatsApp/other delivery channels, but the included script does not implement any outbound delivery (it only generates and can write files); this is a documentation/feature mismatch rather than malicious behavior.
Instruction Scope
SKILL.md instructs the agent to run the bundled Python script with well-scoped commands (generate, config, test). The example integration suggests cron scheduling and says 'send the result' — the skill itself doesn't include messaging/delivery code, so users should be aware that delivery must be implemented separately and that scheduling automation could forward generated reports to other systems if configured elsewhere.
Install Mechanism
Instruction-only skill with no install spec and a small pure-Python script that relies on the stdlib urllib and shutil; nothing is downloaded or written to system locations beyond the user's config directory.
Credentials
The skill requests no environment variables or credentials. It does respect REPORT_CONFIG_DIR if provided and otherwise writes config to ~/.daily-report/config.json — that file may contain an optional NewsData.io API key if you set one, so credentials would be stored locally. The script reads /proc/meminfo and disk usage for system stats (expected for 'system' section).
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills' configs. It only persists its own config under a user-owned directory.
Assessment
This skill appears to do what it says, but review these practical points before installing: - Network calls: The script performs outbound HTTP(S) requests to public APIs (wttr.in, api.coingecko.com, api.quotable.io, and optionally newsdata.io). If you operate in a restricted environment, confirm these endpoints are allowed. - Local storage: It creates and reads a config file at ~/.daily-report/config.json (or the directory set by REPORT_CONFIG_DIR). If you store a NewsData.io API key there, it will be saved in plain JSON; consider file permissions and whether you want credentials stored on disk. - System info: The script reads disk usage and /proc/meminfo to report system health. That exposes basic resource usage which could be sensitive if reports are forwarded externally. - Delivery/cron: The SKILL.md/README show examples of scheduling and say 'send the result' — the bundled code does not itself send reports to messaging services. If you wire this into a cron/job that forwards output (e.g., email, chat, webhook), review and secure the delivery target to avoid leaking internal data. - Test locally first: Run the provided test commands and inspect the generated output and the config file before enabling automation. If you need encrypted or centrally managed API keys, avoid placing them in the plain config JSON and instead use a secrets manager or environment with restricted access. If you want, I can scan the remainder of the script (the truncated part) for any unexpected behavior or help draft a safe deployment checklist.

Like a lobster shell, security has layers — review code before you run it.

automationvk97bkkky3qyc4fcgcq88mq96yd81pddabusinessvk97bkkky3qyc4fcgcq88mq96yd81pddadashboardvk97bkkky3qyc4fcgcq88mq96yd81pddalatestvk97bkkky3qyc4fcgcq88mq96yd81pddareportingvk97bkkky3qyc4fcgcq88mq96yd81pdda
567downloads
0stars
1versions
Updated 7h ago
v1.0.0
MIT-0

Daily Business Report

Generate comprehensive daily briefings by aggregating data from free public APIs.

Quick Start

# Generate full morning report
python scripts/report.py generate

# Generate specific sections only
python scripts/report.py generate --sections weather,crypto,news

# Output as JSON
python scripts/report.py generate -f json

# Output as markdown
python scripts/report.py generate -f md -o morning-report.md

# Configure your location and preferences
python scripts/report.py config --city "Brussels" --crypto "BTC,ETH,SOL" --news-country "us"

# Show current configuration
python scripts/report.py config --show

# Test individual data sources
python scripts/report.py test weather
python scripts/report.py test crypto
python scripts/report.py test news

Commands

CommandArgsDescription
generate[--sections LIST] [-f FORMAT] [-o FILE]Generate the full report
config[--city CITY] [--crypto COINS] [--news-country CC]Configure preferences
config--showDisplay current configuration
test<source>Test a single data source

Report Sections

SectionSourceAPI Key Needed?
Weatherwttr.inNo
CryptoCoinGecko APINo
NewsNewsData.ioFree tier (optional)
QuoteQuotable APINo
SystemLocal disk/memoryNo
DateBuilt-inNo

Example Output

╔══════════════════════════════════════════════════╗
║  DAILY BUSINESS REPORT — Mon 24 Feb 2026        ║
╠══════════════════════════════════════════════════╣
║                                                  ║
║  🌤 Weather: Brussels — 8°C, partly cloudy       ║
║  📈 BTC: $97,432 (+2.3%) ETH: $3,891 (-0.4%)   ║
║  📰 Top News:                                    ║
║     1. EU approves new AI regulation framework   ║
║     2. Tech stocks rally on earnings beat        ║
║  💬 "The best way to predict the future is to    ║
║     create it." — Peter Drucker                  ║
║  💾 Disk: 45% used | RAM: 62% used              ║
║                                                  ║
╚══════════════════════════════════════════════════╝

Integration with OpenClaw

Perfect for cron jobs. Add to your openclaw.json:

{
  "cron": {
    "entries": {
      "morning-report": {
        "schedule": "0 7 * * *",
        "agent": "main",
        "prompt": "Run daily-business-report generate and send the result."
      }
    }
  }
}

Comments

Loading comments...