Google News Api

• Analyzed: May 12, 2026, 3:32 AM
• Findings: 1
• Version: 0.1.0
• Hash: f8a2bf3eb719cca29ec0daa344d4981d0e8bebb11087e8bfa27c08caff9973db
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to fetch Google News data via the BrowserAct API. It requires an API key, which it attempts to read from the `BROWSERACT_API_KEY` environment variable. If the key is missing, the `SKILL.md` instructions explicitly guide the AI agent to prompt the user for the key, including a specific message and URL (`https://www.browseract.com/reception/integrations`). The `scripts/google_news_api.py` file makes legitimate API calls to `https://api.browseract.com/v2/workflow` using the provided key. All behaviors, including the agent's instructions and network communication, are directly aligned with the stated purpose of integrating with the BrowserAct service and lack any indicators of intentional harmful behavior, data exfiltration beyond the API key for its intended use, or malicious execution.