Opennews
v0.1.0Crypto news search, AI ratings, trading signals, and real-time updates via the OpenNews 6551 API. Supports keyword search, coin filtering, source filtering,...
⭐ 0· 400·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (crypto news, AI ratings, trading signals) match the SKILL.md which shows curl-based calls to https://ai.6551.io and requires OPENNEWS_TOKEN. Asking for a bearer token and curl is appropriate for an HTTP API client.
Instruction Scope
SKILL.md instructs only to call specific REST endpoints with Authorization: Bearer $OPENNEWS_TOKEN and examples use jq for local filtering. It does not ask the agent to read unrelated local files or exfiltrate data. Note: some examples use jq, but jq is not declared in the skill metadata's required binaries (minor scope/declared-dependency mismatch).
Install Mechanism
Install spec only lists a brew formula for curl — curl is a standard, low-risk dependency. The brew-only install entry is fine for macOS but won't apply on all declared OSes (linux, win32). No arbitrary downloads or extract steps are present.
Credentials
Only OPENNEWS_TOKEN is required (primary credential). That is proportional to an API client that needs a bearer token. No unrelated credentials or broad environment access are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. It does not modify other skills or system-wide config per the provided files.
Assessment
This skill appears to do what it says: run curl against ai.6551.io using your OPENNEWS_TOKEN. Before installing, verify the token provider (https://6551.io/mcp) and consider: 1) only give a token with minimal scope/permissions, 2) if you intend to run the example pipelines, install jq locally (examples use it) — the skill's metadata is inconsistent about jq, 3) brew install is macOS-centric; on Linux/Windows ensure curl is present from your platform package manager, and 4) if you need higher assurance, verify the upstream project (package.json homepage points to a GitHub repo) or test the skill in an isolated environment.Like a lobster shell, security has layers — review code before you run it.
latestvk971h43rbwp4qmwzc4nps757js81x3tr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📰 Clawdis
OSmacOS · Linux · Windows
Binscurl
EnvOPENNEWS_TOKEN
Primary envOPENNEWS_TOKEN
Install
curl (HTTP client)
brew install curl