Blog Watcher

PassAudited by ClawScan on May 11, 2026.

Overview

This is a simple instruction-only RSS/blog monitoring skill with no code or credentials, though its tool guidance is broad and generic.

This appears safe to install as an instruction-only helper, but it is very generic. Provide specific RSS/blog URLs and require confirmation before any shell command or local file write.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If invoked, the agent may consider using shell commands or local file access while helping with blog monitoring.

Why it was flagged

The skill tells the agent that shell, file, and web tools are available, but does not give detailed scoping. This is broad, though there is no evidence of automatic execution or unsafe commands.

Skill content

This skill uses ClawdBot's standard tools:
- **bash** - Execute commands
- **read_file** - Read files
- **write_file** - Write files  
- **web_fetch** - Fetch web content
- **web_search** - Search the web

Recommendation

Use the skill with clear instructions, and ask the agent to confirm before running shell commands or modifying local files.