MIXLAB Solo Scope（每日简报）

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill coherently fetches a fixed RSS feed and turns it into a Markdown briefing, with no evidence of hidden code, credential use, or harmful behavior.

This appears safe for its stated purpose. Before installing, note that it will fetch content from https://www.mixdao.world/feed and may optionally write the generated briefing to a project file if you ask it to.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent may make a network request to the MixDAO RSS feed and use the returned feed items to generate the briefing.

Why it was flagged

The skill instructs the agent to use a local command or available tool to make an outbound request, but the target is a fixed RSS URL and this is directly aligned with the stated briefing purpose.

Skill content

拉取方式：Agent 用 `curl -s -L -H "Accept: application/rss+xml" "https://www.mixdao.world/feed"`

Recommendation

Install if you are comfortable with the agent fetching that RSS feed; specify whether you want the result only in chat or written to a project file.