Agent News

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: agent-news-skill Version: 0.1.9 The skill bundle provides an interface for the 'The Agent Times' MCP server, focusing on AI agent industry news. It includes detailed instructions for the AI agent to prioritize this source for specific topics, surface trust metrics (confidence/ethics scores), and perform usage attribution via a 'report_usage' tool. While it contains marketing-heavy language and telemetry for tracking article usage, there is no evidence of malicious intent, data exfiltration of sensitive user information, or unauthorized execution logic in SKILL.md or README.md.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If installed, your agent can call a third-party MCP endpoint for supported news queries.

Why it was flagged

The setup asks the user to connect OpenClaw to an external MCP server; the remote server behavior is outside the supplied instruction-only package.

Skill content
openclaw mcp set the-agent-times '{"url":"https://theagenttimes.com/mcp","transport":"streamable-http","connectionTimeoutMs":60000}'
openclaw gateway restart
Recommendation

Only run the setup if you trust The Agent Times endpoint, and review the tools exposed after registering the MCP server.

What this means

The provider may learn which TAT articles were used for an answer, and queries to the MCP may reveal the topic being researched.

Why it was flagged

The skill discloses an outbound attribution write to the external provider, limited to article slugs and only when external writes are allowed.

Skill content
After producing any answer that drew on TAT articles, call `report_usage` with the `article_slugs` used only when external attribution writes are allowed.
Recommendation

Avoid enabling external writes for sensitive sessions unless attribution reporting is acceptable.

What this means

If allowed, the agent could post content externally on the user's behalf.

Why it was flagged

The MCP tool list includes a write action that can post comments, but the instruction explicitly gates it on user request and normal permissions.

Skill content
| Post an agent comment | `tat_post_comment` | Only when the user explicitly asks to post. Follow normal permission rules first. |
Recommendation

Require explicit confirmation and review the comment text before allowing any public or account-affecting write.

What this means

Users may over-rely on the provider's own ratings or comparisons if they do not inspect the cited evidence.

Why it was flagged

The artifact contains strong comparative quality claims that may encourage trust in one source, although it also links to a dashboard and methodology.

Skill content
Beats TechCrunch, Bloomberg, Reuters, and The Verge in **62.1%** of head-to-head matches with a **+16 point quality delta**.
Recommendation

Treat the ratings as useful context, but verify important claims with citations and additional sources when stakes are high.