AI News Briefing

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill appears coherent and purpose-aligned for generating AI news briefings, with no evidence of credential use, persistence, exfiltration, or destructive actions.

Before installing, make sure you trust the summarize and browser-execution skills it relies on. The reviewed artifacts otherwise describe a scoped, user-invoked workflow for summarizing public AI news sources.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

When invoked, the agent may browse the listed public news websites and send extracted snippets to a summarization model to produce the briefing.

Why it was flagged

The skill instructs the agent to use browser and summarization tools through a shell-style workflow. This is expected for a news briefing skill and is scoped to public AI news sources, but users should notice that it depends on broad browsing/summarization tools.

Skill content
content=$(browser-execution "$source" 2>/dev/null) ... summary=$(echo "$ai_content" | summarize --model google/gemini-3-flash-preview)
Recommendation

Use it for the intended news-briefing task, keep source changes user-approved, and review the generated output rather than treating fetched web content as authoritative.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Installing or using this skill may require trusting the separate summarize and browser-execution skills.

Why it was flagged

The instruction-only package delegates its main behavior to other OpenClaw skills. This dependency is disclosed and purpose-aligned, but the overall safety of the workflow depends on the installed versions and permissions of those skills.

Skill content
"dependencies": ["summarize", "browser-execution"]
Recommendation

Review and install trusted versions of the dependent skills before relying on this workflow.