MorningAI

• Verdict: Advisory
• Analyzed: Apr 14, 2026, 9:41 AM
• Findings: 0
• Version: 1.2.5
• Hash: 760abf5e13abb557490789b7d45001ee1010e49ad62a293e859a3f0582098e71
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: morning-ai Version: 1.2.5 The morning-ai skill is a comprehensive AI news aggregator that automates data collection from multiple public sources (Reddit, GitHub, arXiv, etc.) and generates structured reports. The code and instructions in SKILL.md are well-aligned with the stated purpose, using a multi-step workflow to manage configuration, data collection, and report generation. While the skill utilizes broad permissions such as Bash execution, file I/O, and WebSearch to supplement its Python-based collectors, these actions are transparently documented and consistent with the tool's functionality. No evidence of data exfiltration, malicious intent, or harmful prompt injection was found across the Python libraries (lib/), shell scripts (sync.sh, check-config.sh), or entity registries.