Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Content Watcher

v1.0.0

Monitor RSS feeds, blogs, and news sources with AI-powered summarization and generate daily digests in Markdown or console output.

1· 1.3k·10 current·10 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (RSS monitoring + summarization) align with required binaries (node, npm), the npm install spec, and the provided CLI code. The code implements RSS parsing, HTTP fetch/extract, local summarization, and markdown digest generation. Minor mismatch: SKILL.md/README mention integrations (Feishu, Email delivery) but the included code does not implement remote delivery or require credentials for those services.
Instruction Scope
SKILL.md instructions are limited to installing the package, adding sources, running the CLI, and saving output. Runtime code reads/writes a single user-scoped config at ~/.config/content-watcher/config.json, fetches URLs provided by the user, and writes digest output locally or to a file. There are no instructions to read unrelated system files or to transmit data to external endpoints other than fetching the user-specified feeds/URLs.
Install Mechanism
Install uses a normal npm package (content-watcher) and provides a CLI binary; package.json and package-lock.json list common, well-known dependencies (axios, cheerio, rss-parser, etc.). No downloads from custom URLs, no extracted archives from arbitrary hosts.
Credentials
The skill declares no required environment variables or credentials and the code does not expect secrets. This matches the implementation. Note: the README/SKILL.md reference possible webhook/email delivery but no code requires tokens; if future versions add those features they will likely request credentials—review those changes before granting secrets.
Persistence & Privilege
The skill stores its own config under the user's home directory (~/.config/content-watcher/config.json) and persists seen URLs — this is expected for a monitoring CLI. always is false and the skill does not modify other skills or global agent settings.
Assessment
This package appears to be what it says: a local CLI that fetches RSS/URLs you add and produces local summaries. Before installing, consider: (1) review the package source or install in a sandbox if you are uncomfortable running code from an unknown author; (2) be cautious about adding internal or sensitive URLs as monitored sources (the tool will fetch any URL you configure, which could expose internal endpoints to local network requests); (3) if you later enable webhook/email integrations, inspect what credentials are requested and where digests are sent; (4) verify the npm package identity on the registry (owner/publish history) if provenance matters.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📰 Clawdis
Binsnode, npm

Install

Install Content Watcher CLI
Bins: content-watcher
npm i -g content-watcher
latestvk975jb27r1zbm13m0ab8dm06vh814nn6
1.3kdownloads
1stars
1versions
Updated 6h ago
v1.0.0
MIT-0

Content Watcher

Monitor any RSS feeds, blogs, or news sources and get AI-powered daily digests.

Quick Start

# Install dependencies
npm install

# Add your first source
content-watcher add https://techcrunch.com/feed/ --name "TechCrunch"

# Run once to test
content-watcher run

# Save digest to file
content-watcher run --output digest.md

Commands

CommandDescription
add <url>Add a source to monitor
remove <id>Remove a source
listList all sources
runGenerate digest now
configShow configuration

Features

  • ✅ RSS/Atom feed parsing
  • ✅ Web content extraction
  • ✅ AI text summarization (local, no API key)
  • ✅ Markdown digest generation
  • ✅ Multi-source aggregation
  • ✅ Duplicate detection
  • ✅ Configurable via CLI

Configuration

Config stored at ~/.config/content-watcher/config.json:

{
  "sources": [...],
  "delivery": "console",
  "summaryStyle": "bullet",
  "maxItemsPerSource": 5
}

Use Cases

  1. Competitive Intelligence - Monitor competitor blogs/news
  2. Industry Trends - Track tech/finance/marketing trends
  3. Research Assistant - Aggregate academic/sources
  4. Content Curation - Create newsletters automatically

Integration

Works great with:

  • Feishu webhook (auto-post digest)
  • Email delivery (send digest)
  • Cron scheduling (daily runs)

Comments

Loading comments...