Back to skill
Skillv1.0.0
ClawScan security
media-news-summary · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 5, 2026, 4:26 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's requirements and instructions match its stated purpose (collecting and summarizing media coverage); it is instruction-only, requests no credentials, and has no install steps.
- Guidance
- This skill is internally coherent, but check these practical points before installing: (1) it will browse external news sites—ensure the agent's browser/tool has only the network permissions you expect and no access to private accounts or sensitive credentials; (2) some outlets are paywalled or rate-limited—results may be incomplete or require credentials (which the skill does not request); (3) scraping or republishing may implicate site terms—use for personal/transformative summarization and cite sources as instructed; (4) test the skill with a non-sensitive query first to verify behavior. If you require stronger guarantees (no external network access, or only specific domains), confirm your agent/platform enforces those restrictions before enabling autonomous runs.
Review Dimensions
- Purpose & Capability
- okName/description (aggregating global media coverage) align with the SKILL.md: it lists relevant outlets and tells the agent to fetch and summarize their reporting. There are no unrelated requirements (no credentials, no installs).
- Instruction Scope
- noteInstructions direct the agent to open specific news sites via browser actions and extract headlines/opinions—this is consistent with the purpose. Minor note: the instructions assume the agent's browser/tool can access and scrape those sites and do not discuss paywalls, rate limits, or citation mechanics; they do not instruct reading local files or unrelated environment variables.
- Install Mechanism
- okInstruction-only skill with no install spec and no code files; nothing is written to disk and no external packages are fetched.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths—appropriate for a public-news summarization task.
- Persistence & Privilege
- okalways is false and the skill does not request persistent system presence or modify other skills. Note that the platform default allows autonomous invocation, which is normal and not by itself a security issue.