Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
News Sentiment Scanner
v1.1.0Scan news sources and RSS feeds for events that could move prediction market prices. Score headlines for market impact, flag urgent stories, and cross-refere...
⭐ 0· 57·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The name/description promise market-impact scoring, urgent story flags, and cross-references to active markets, but the SKILL.md only shows a bash loop that curls RSS feeds and prints source|title|link|pubDate. There is no scoring logic, no flagging, and no market-lookup or integration steps. Also 'jq' is declared as required but not used.
Instruction Scope
The instructions instruct the agent to fetch multiple external RSS feeds and print headlines (first 10 items each). They do not implement the core claimed operations (sentiment scoring, flagging, cross-referencing). The doc allows the agent to add or substitute feeds based on context, which is vague and grants broad discretion to contact additional external sources.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so nothing is written to disk and risk is low. It requires common binaries (curl, jq, python3); no downloads or external installers are used.
Credentials
The skill requests no environment variables, credentials, or config paths — appropriate for an RSS-scanning tool. Minor mismatch: it declares 'jq' as required even though the provided script uses python3 for XML parsing; this looks like sloppy metadata rather than a credential issue.
Persistence & Privilege
always is false and the skill is user-invocable. The skill can be invoked autonomously (platform default), which combined with network fetches increases runtime reach but is expected for this type of skill. It does not request persistent system-wide privileges.
What to consider before installing
This skill's description overpromises: it claims to score headlines, flag urgent stories, and cross-reference active markets, but the SKILL.md only fetches and prints headlines from a list of RSS feeds. Before installing: (1) Ask the author for the missing pieces — the scoring algorithm, how 'urgent' is defined, and what APIs/credentials are used to cross-reference markets. (2) If you expect automatic market checks, require explicit integrations (e.g., the market platform's API and minimal-scoped credentials) rather than implicit behavior. (3) Be aware the skill will fetch arbitrary external feeds and may be allowed to add feeds at runtime — if you want stricter control, require a fixed whitelist. (4) Consider requesting clearer metadata (remove unused 'jq' requirement) and explicit error handling/logging instead of swallowing exceptions. If these gaps aren't addressed, treat the skill as only a headline-fetcher and not a complete market-impact analyzer.Like a lobster shell, security has layers — review code before you run it.
agentbetsvk972ntcn5ep58c4yn75fvkq3ks83kmdsbettingvk972ntcn5ep58c4yn75fvkq3ks83kmdslatestvk972ntcn5ep58c4yn75fvkq3ks83kmdsopenclawvk972ntcn5ep58c4yn75fvkq3ks83kmdsprediction-marketsvk972ntcn5ep58c4yn75fvkq3ks83kmdssports-bettingvk972ntcn5ep58c4yn75fvkq3ks83kmds
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📰 Clawdis
Binscurl, jq, python3