morning-briefing

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a straightforward daily briefing generator with disclosed weather lookup and local file writes, though users should notice that it reprints upstream data verbatim and the packaged game/concert templates are absent.

This appears safe to install if you are comfortable with a weather request to wttr.in and with the agent showing upstream briefing data verbatim. Check the missing jq templates if you expect game or concert sections, and review the config before adding new sources or file paths.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Game and concert sections may be omitted or may depend on templates added later that were not part of this reviewed package.

Why it was flagged

The package manifest does not include the assets/templates files that SKILL.md and the script say are needed to format non-weather source data.

Skill content
3 file(s): SKILL.md (2227 bytes), scripts/init_config.sh (788 bytes), scripts/morning_briefing.sh (2789 bytes)
Recommendation

Verify or review the expected jq templates before relying on those sections, or disable missing sources in the config.

What this means

When weather is enabled, the configured location is sent to wttr.in.

Why it was flagged

The script makes a disclosed external weather request using the configured location; this is central to the briefing purpose and is bounded to the weather feature.

Skill content
weather_data=$(curl -s --max-time 10 "wttr.in/${location}?format=%l:+%c+%t+(feels+like+%f),+%w+wind,+%h+humidity"
Recommendation

Use a coarse location or set weather.enabled to false if you do not want that external lookup.

What this means

Incorrect, misleading, or prompt-like text from upstream data sources could appear directly in the briefing.

Why it was flagged

The generated briefing can include text from other skills' JSON outputs, and the agent is instructed to display that generated markdown without summarizing or filtering.

Skill content
Other sections are driven by external skills that write JSON data files ... Read the file and present its contents verbatim to the user.
Recommendation

Use trusted upstream data-producing skills and templates, and treat the generated briefing as sourced content rather than as instructions to the agent.