Back to skill
Skillv1.0.0
ClawScan security
News Specialist · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 14, 2026, 4:47 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only 'news analyst' whose declared behavior, resource needs, and runtime instructions align with its stated purpose and do not request credentials or install code.
- Guidance
- This skill is instruction-only and internally consistent for a news analyst: it doesn't install code or ask for credentials. Before installing, consider that it will read session history and memory for context and will call other 'news search' skills — so ensure those other skills and any stored memory do not contain sensitive data you don't want reused. Also verify any factual claims by checking the sources the agent retrieves, since the skill emphasizes relying on external news search skills rather than providing built-in source verification.
Review Dimensions
- Purpose & Capability
- okName, description, and SKILL.md consistently describe a news-analysis assistant. The skill does not request unrelated binaries, environment variables, or config paths; everything it asks for (session context, retrieved news via other search skills) is coherent with a news-analysis role.
- Instruction Scope
- noteInstructions ask the agent to review session history/memory for relevant context and to call available 'news search skills' to retrieve articles. Accessing session history and memory is reasonable for contextual responses, but it means the skill will reuse any sensitive information present in memory. The skill does not instruct reading local files, env vars, or sending data to unexpected external endpoints.
- Install Mechanism
- okNo install spec and no code files — the skill is instruction-only, so nothing will be written to disk or installed. This is the lowest-risk install model.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. That is proportionate for a news analysis role.
- Persistence & Privilege
- okalways is false and the skill is user-invocable (defaults). It does not request permanent presence or system-wide configuration. The agent may invoke it autonomously (platform default), which is expected for skills; this alone is not a concern.