Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ai-news-oracle

v1.0.2

Fetch real-time AI news briefings powered by SkillBoss API Hub (Hacker News, TechCrunch, The Verge). Uses SkillBoss search and chat capabilities for news agg...

0· 95·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for modestyrichards/modesty-ai-news-oracle.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "ai-news-oracle" (modestyrichards/modesty-ai-news-oracle) from ClawHub.
Skill page: https://clawhub.ai/modestyrichards/modesty-ai-news-oracle
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install modesty-ai-news-oracle

ClawHub CLI

Package manager switcher

npx clawhub@latest install modesty-ai-news-oracle
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md describes a single purpose (aggregate and summarize AI news via SkillBoss API) and the runtime example only calls https://api.skillboss.co/v1/pilot — that is coherent with the description. However, registry metadata listed no required environment variables while the SKILL.md explicitly declares requires.env: [SKILLBOSS_API_KEY], which is inconsistent.
Instruction Scope
The instructions and code sample stick to searching and summarizing news via the SkillBoss API and do not ask the agent to read arbitrary local files, other credentials, or exfiltrate unrelated data. The only data sent externally is search input and results to SkillBoss.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to run locally, which minimizes disk-write/execute risk. The README/installation examples reference GitHub repos (two different owners) but no automated installer is included.
!
Credentials
The skill requires a single API credential (SKILLBOSS_API_KEY) according to SKILL.md, which is reasonable for a third‑party API integration. The concern is the mismatch between the registry metadata (saying no required env vars) and the SKILL.md declaring the API key; this provenance/metadata inconsistency raises trust questions. No other credentials are requested.
Persistence & Privilege
The skill does not request 'always: true' and is user-invocable only. There is no indication it modifies other skills or requests elevated/system-wide privileges.
What to consider before installing
Before installing or providing an API key: 1) Verify the skill's source repository and author — SKILL.md references swimmingkiim, README references ModestyRichards, and the registry metadata does not list the declared SKILL.md env var; this inconsistency should be resolved. 2) Confirm that https://api.skillboss.co is the legitimate service you expect and review its privacy/security policy; the SKILLBOSS_API_KEY will be sent to that endpoint. 3) Inspect the referenced GitHub repo (or ask the publisher for a canonical repo link) to ensure the code and README match the published SKILL.md. 4) If you cannot validate the publisher, avoid using sensitive credentials with this skill; create a scoped API key with limited permissions if possible. 5) If you want higher assurance, ask the publisher for a signed release or a repository you can audit; resolving the metadata provenance issues would increase confidence.

Like a lobster shell, security has layers — review code before you run it.

aivk97e3yexj1fqgcpd4zc125j5g984x42glatestvk97e3yexj1fqgcpd4zc125j5g984x42g
95downloads
0stars
2versions
Updated 1w ago
v1.0.2
MIT-0

📖 Complete setup guide: https://skillboss.co/skill.md

AI News Oracle Skill

"The fastest way for autonomous agents to stay updated on AI trends without browsing the web."

This skill connects your agent to the AI News Oracle, powered by SkillBoss API Hub. It monitors top AI news sources (Hacker News, TechCrunch, The Verge), summarizes them using SkillBoss's chat capability, and delivers a concise, hallucination-free briefing JSON.

Features

  • Real-time Monitoring: Aggregates news from trusted tech sources via SkillBoss search API.
  • AI-Powered Summary: Uses SkillBoss API Hub's chat capability to generate consistent, agent-friendly summaries.
  • Unified API: Single SKILLBOSS_API_KEY for all capabilities via https://api.skillboss.co/v1/pilot.

Tools

ai_news_briefing

Fetches the latest AI news briefing. Returns a structured summary with timestamps and source links.

Parameters:

  • (None) - Just call the tool to get the latest briefing.

Example Output:

AI News Briefing (2026-02-10 06:46:22)

- Open source AI is the path forward (Meta)
- Anthropic closes in on $20B round
- ChatGPT rolls out ads in free tier

Source: AI News Oracle via SkillBoss API Hub

Installation

Using OpenClaw CLI:

openclaw install skill https://github.com/swimmingkiim/openclaw-skill-ai-news-oracle

Usage

import requests, os

SKILLBOSS_API_KEY = os.environ["SKILLBOSS_API_KEY"]
API_BASE = "https://api.skillboss.co/v1"

def pilot(body: dict) -> dict:
    r = requests.post(
        f"{API_BASE}/pilot",
        headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"},
        json=body,
        timeout=60,
    )
    return r.json()

# Step 1: Search for latest AI news
search_result = pilot({
    "type": "search",
    "inputs": {"query": "latest AI news today"},
    "prefer": "balanced"
})
news_raw = search_result["result"]

# Step 2: Summarize with LLM via SkillBoss chat
summary_result = pilot({
    "type": "chat",
    "inputs": {
        "messages": [
            {"role": "system", "content": "You are an AI news summarizer. Return a concise bullet-point briefing."},
            {"role": "user", "content": f"Summarize these AI news results:\n{news_raw}"}
        ]
    },
    "prefer": "balanced"
})
briefing = summary_result["result"]["choices"][0]["message"]["content"]
print(briefing)

Environment Variables

VariableDescription
SKILLBOSS_API_KEYSkillBoss API Hub authentication key

Links

  • API Hub: https://api.skillboss.co/v1/pilot
  • Developer: swimmingkiim

Comments

Loading comments...