Daily Business Report
PassAudited by ClawScan on May 1, 2026.
Overview
This looks like a purpose-aligned report generator, but it can contact outside services, store an optional news API key, and run on a user-configured daily schedule.
Before installing, decide whether you are comfortable with public API calls for weather, crypto, quotes, and optional news; protect any NewsData.io key you configure; and review any cron entry carefully so reports are only sent where and when you intend.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your report preferences and some requested data are sent to public API providers, and their returned content is included in the report.
The report is built from external providers, so configured city, selected crypto assets, and returned third-party content are part of the data flow.
api_get(f"https://wttr.in/{city}?format=j1") ... api_get(f"https://api.coingecko.com/api/v3/simple/price?ids={ids}...") ... api_get("https://api.quotable.io/quotes/random?limit=1")Use non-sensitive locations/preferences, review provider privacy expectations, and disable sections you do not want queried.
If you configure a news API key, it is stored locally and used with the intended news provider.
An optional NewsData.io API key can be saved in the local config file and then sent to the NewsData.io endpoint for headlines.
"news_api_key": "" ... CONFIG_FILE.write_text(json.dumps(cfg, indent=2)) ... https://newsdata.io/api/1/latest?apikey={api_key}Use a limited-scope/free-tier key, protect the local config file, and do not place unrelated or high-value credentials in this setting.
If you add the cron entry, the report may run and be sent repeatedly until you remove or change the schedule.
The documentation shows a user-configured recurring OpenClaw job that can run and send the report daily.
"Perfect for cron jobs" ... "schedule": "0 7 * * *" ... "prompt": "Run daily-business-report generate and send the result."
Confirm the schedule, destination, and report sections before enabling cron, and remove the entry when no longer needed.
You have less external information to verify who maintains the skill or where the code originated.
The registry information does not provide an upstream source or homepage for independent provenance review.
Source: unknown; Homepage: none
Install only if you trust the registry entry and owner, and review the included files before enabling scheduled use.