Security audit

News Daily Digest Free

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to match its stated purpose: it gathers public news, summarizes it in Chinese, and saves local poster/data files, with recurring scheduled saves as the main thing users should manage.

Before installing, be comfortable with the skill browsing public news sites and saving keyword-specific summaries and posters under ~/workspace/news-digest. Use scheduled briefings only when you want ongoing automatic generation, and periodically review or delete old data/posters because retention and job removal are not fully documented.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill states that it will automatically create directories and persist fetched data and generated posters under the user's home workspace, but it does not clearly warn users before performing persistent file writes. Silent persistence can create privacy, disk-usage, and data-retention risks, especially when the stored content includes browsing-derived news data tied to user-selected topics.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The scheduled-job feature enables unattended recurring generation and saving of files, but the documentation does not clearly warn about ongoing background writes and accumulation over time. This can lead to unexpected persistence, storage growth, and continued processing after the user no longer expects the skill to run.

Static analysis

No suspicious patterns detected.