Creator Intel V5
ReviewAudited by ClawScan on May 10, 2026.
Overview
This tech-news aggregation skill is mostly purpose-aligned, but it embeds a Tavily API key and its documented run/cron commands point to a script that is not included in the package.
Before installing, ask the maintainer to fix the script-name mismatch and remove the hardcoded Tavily key. Do not enable the daily Feishu cron job until you have verified the exact script being run, configured your own API key safely, and are comfortable with external search/RSS requests and local history storage.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search requests may run under a shared or unknown Tavily account, and users have no clear credential boundary, rotation method, or assurance about whose quota/account is being used.
The script embeds a provider API key directly in source code, while the supplied metadata declares no required credentials and SKILL.md tells users to configure a key in a differently named script.
TAVILY_API_KEY = "tvly-dev-..."
Remove the hardcoded key, declare the Tavily credential requirement in metadata, and load the key from a user-controlled environment variable or config file.
Following the instructions may fail or may cause users to obtain or run an unreviewed file with the expected name, especially when combined with the cron setup.
The documented runtime target is scripts/generate_intel.py, but the provided manifest contains scripts/generate_brief.py instead. The reviewed code does not match the file users are told to execute or schedule.
cd /path/to/creator-intel-v5 && python3 scripts/generate_intel.py
Do not run or schedule the skill until the package includes the exact script referenced by the instructions, or the instructions are corrected to point to the reviewed file.
If enabled, the skill can continue posting generated briefings on a schedule after the initial setup.
The skill documents an optional persistent scheduled task that automatically runs daily and pushes output to a Feishu channel.
openclaw cron add ... --schedule "0 9 * * *" ... --channel feishu
Only create the cron job if you want ongoing automated posts, and verify you know how to disable or remove the scheduled task.
A local record of previously selected URLs will remain on the machine between runs.
The skill persists a local history file for URL deduplication with a documented retention limit.
历史记录：`~/.openclaw/creator-intel/history.json` ... 保留数量：最近 500 条
Review or delete ~/.openclaw/creator-intel/history.json if you do not want this local history retained.