Panews

This skill appears to be a coherent PANews reader: the SKILL.md workflows and bundled CLI implement article search, rankings, events, and briefings. However, before installing: 1) Inspect scripts/cli.mjs in full for network endpoints, calls to eval/child_process, direct fs reads, or usages of process.env — look for 'fetch', 'https', 'http', 'require("child_process")', 'exec', 'spawn', 'fs.readFile', and direct references to process.env keys. 2) Open SKILL.md in a text editor that can reveal invisible characters (zero-width/Unicode control chars) and remove or verify them — the scan flagged such characters. 3) Prefer running the CLI in a restricted sandbox first (no secrets, network controls) to observe behavior. 4) If you do not trust the publisher or cannot review the CLI code, do not enable autonomous invocation or install the skill. 5) Ask the publisher for source repository or homepage and a signed release; absence of an authoritative source reduces trust. If you want, I can scan the full CLI text for suspicious patterns (network calls, exec, env usage) — provide the full file content and I will analyze it.