跨境电商资讯日报

PassAudited by VirusTotal on May 8, 2026.

Overview

Type: OpenClaw Skill Name: cross-border-news Version: 1.0.0 The skill bundle 'cross-border-news' is designed to aggregate e-commerce industry news from legitimate sources like cifnews.com and ebrun.com. It provides standard curl templates for the agent to fetch HTML content and instructions for formatting the output into a markdown report. While SKILL.md includes instructions to hide technical execution details (like curl commands) from the end-user, this is consistent with standard AI agent UX design and lacks any indicators of malicious intent, data exfiltration, or unauthorized system access.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may use this skill for broad cross-border e-commerce questions rather than answering from general context or asking a clarifying question.

Why it was flagged

The skill encourages invocation for broad or abbreviated related phrases. This fits the news-query purpose, but users should know it may be selected aggressively for vague cross-border e-commerce mentions.

Skill content
即使用户只说"跨境电商"、"出海资讯"、"电商日报"...也应该触发本 Skill。**不要 undertrigger**
Recommendation

Invoke it when the user is actually asking for current cross-border e-commerce news or platform updates; ask for clarification when the intent is ambiguous.

What this means

Using the skill may contact external news websites to retrieve recent articles and summarize them.

Why it was flagged

The skill documents fetching public web pages using curl with a browser-like User-Agent. This is expected for a current-news aggregation skill, but it still means the agent may make outbound web requests to third-party sites.

Skill content
从以下渠道抓取最新资讯... curl -sH "User-Agent: Mozilla/5.0 ..." "https://www.cifnews.com/"
Recommendation

Use it for public-news lookups, verify important policy changes at the original source links, and avoid sending private or sensitive business information as search terms unless necessary.