Agent Fact Check Verify

ReviewAudited by ClawScan on May 10, 2026.

Overview

This fact-checking skill is coherent and purpose-aligned, but it can use external search/social tools and optional API keys or session cookies.

This skill appears safe for normal public fact-checking. Before using it, remember that claims may be searched through external providers, and only configure Twitter/Reddit cookie-based CLIs if you trust those tools and can protect the session cookies.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A fact-check request may trigger several searches and social-platform lookups, which can consume quotas and send query terms to external services.

Why it was flagged

The skill directs the agent to make multiple external searches and optional social-platform CLI queries. This is bounded and aligned with fact-checking, but it is still notable tool activity.

Skill content
強制最低查詢次數... Tavily 至少 5 次... Twitter CLI 至少 4 次... Reddit CLI 至少 1 次
Recommendation

Use the skill for information you are comfortable searching externally, and disable or avoid optional CLIs if you do not want social-platform lookups.

What this means

If configured, the skill may rely on authenticated X or Reddit sessions through separate CLIs; mishandled cookies could expose those accounts.

Why it was flagged

The documentation describes optional cookie/session credentials for X and Reddit CLIs. These are expected for authenticated platform access, and the artifacts do not show logging or unrelated use, but session cookies are sensitive.

Skill content
twitter-cli (Cookie-based)... Required auth: `auth_token`, `ct0`... rdt-cli... Primary session: `reddit_session`
Recommendation

Use least-privilege accounts, keep cookie files permission-restricted, do not commit them to repositories, and review the third-party CLI behavior before providing credentials.

What this means

Installing optional external CLIs adds code and dependency risk beyond this skill’s included files.

Why it was flagged

The optional social CLIs are external tools outside the reviewed package and are not pinned by an install spec. There is no automatic installation, so this remains a supply-chain note rather than a concern.

Skill content
- X CLI: <https://github.com/jackwener/twitter-cli>
- Reddit CLI: <https://github.com/jackwener/rdt-cli>
Recommendation

Install optional CLIs only from trusted sources, pin versions where possible, and review their permissions before connecting accounts.

What this means

Text from a claim may be transformed into search queries sent to Tavily, default search tools, or social platforms.

Why it was flagged

The skill sends fact-check search queries to external search providers when available. This is disclosed and central to the purpose, but users should understand that query content can leave the local environment.

Skill content
只要有 `TAVILY_API_KEY` 且 Tavily 可用,所有一般搜尋先走 Tavily
Recommendation

Avoid submitting private, confidential, or identifying information unless you are comfortable with it being used in external searches.