openclaw-feeds

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 3.1.1
• Hash: 2c1a1eb726804bc23fb6c8e73b3d44ca090cf25ed3c51ceac2275e2c83d23252
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'openclaw-feeds' is benign. The `SKILL.md` clearly defines the purpose as an RSS news aggregator and includes a positive constraint instructing the agent *not* to use web search or other URL-fetching tools beyond the specified RSS feeds. The `scripts/feeds.py` Python code uses standard libraries (`urllib.request`, `feedparser`) to fetch and parse RSS feeds from a predefined list of legitimate news sources in `scripts/lists.py`. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts to subvert the agent's intended behavior. Network access is limited to fetching RSS feeds, which is essential for its stated function.