RSS Daily Digest
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: rss-daily-digest Version: 1.0.0 The OpenClaw skill 'rss-daily-digest' is designed to fetch RSS feeds, summarize articles, and generate a daily digest. All files (SKILL.md, Python scripts, feed-sources.md) align with this stated purpose. The Python scripts perform expected file I/O (reading local feed sources, writing to /tmp, outputting to stdout) and network requests to legitimate RSS feed URLs. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`, `eval`), persistence mechanisms, or prompt injection attempts against the agent to deviate from its task. The instruction in SKILL.md to `pip3 install feedparser` is for a legitimate dependency and not indicative of malicious intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A malicious or compromised RSS entry could include text that tries to influence the agent, although the intended workflow is only to summarize the content.
The agent processes article titles and descriptions fetched from external RSS feeds. That is expected for the skill, but feed content is untrusted and should not be treated as instructions.
For each article in the JSON output: - Read the title and description - Generate a one-sentence summary
Keep feed text isolated as source material for summaries, and do not follow instructions embedded in article titles or descriptions.
Installing the latest package from the default Python package source may introduce normal dependency supply-chain risk.
The skill depends on an external Python package and suggests installing it without a pinned version. This is common and purpose-aligned, but it leaves package provenance and version control to the user.
If `feedparser` is not installed, run: `pip3 install feedparser`
Install dependencies from a trusted environment, preferably with a pinned or reviewed feedparser version if using this skill regularly.