ClawHub

opennews

v1.0.0

Crypto news search, AI ratings, trading signals, and real-time updates via the OpenNews 6551 API. Supports keyword search, coin filtering, source filtering,...

⭐ 28· 9.7k·24 current·24 all-time
by@infra403
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (crypto news, AI ratings, trading signals) align with the declared requirement (OPENNEWS_TOKEN) and the SKILL.md which shows authenticated REST calls to https://ai.6551.io. Requested binary (curl) is appropriate for the provided curl examples.
✓
Instruction Scope
Instructions are narrowly scoped to performing HTTPS requests to the documented API endpoints and using the OPENNEWS_TOKEN in a Bearer Authorization header. The SKILL.md does not instruct reading arbitrary files, other env vars, or transmitting data to unexpected endpoints.
ℹ
Install Mechanism
Install spec only lists a brew formula for curl. This is low risk but slightly odd because curl is commonly available on target OSes; installing curl via brew is harmless but arguably unnecessary. No downloads from untrusted URLs or archives are present.
✓
Credentials
Only a single API token (OPENNEWS_TOKEN) is required and it is used directly in the Authorization header as expected. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
always:false (default) and user-invocable:true. The skill does not request elevated or persistent system privileges and does not modify other skills' configs. Autonomous invocation is allowed by default but is not combined with other concerning factors.
Assessment
This skill is internally consistent, but before installing: ensure the OPENNEWS_TOKEN you supply is scoped only for the 6551 service and not reused elsewhere; confirm you trust the ai.6551.io service (review provider docs and rate limits); rotate the token if you later stop using the skill; avoid granting broader credentials (AWS/GitHub/etc.) that the skill does not need. Note the brew install for curl is benign but typically unnecessary on most systems.

Like a lobster shell, security has layers — review code before you run it.

latestvk9757105knktn4twbp1fwp04en81wzcr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📰 Clawdis
OSmacOS · Linux · Windows
Binscurl
EnvOPENNEWS_TOKEN
Primary envOPENNEWS_TOKEN

Install

curl (HTTP client)brew install curl

Comments