Back to skill
Skillv1.0.0
ClawScan security
newslatest · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMay 1, 2026, 8:20 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5.5
- Summary
- This skill is a straightforward news-fetching helper that calls a disclosed public API and does not request credentials, local files, installs, or account access.
- Guidance
- Before installing, note that the skill relies on a third-party news API for results, so accuracy and availability depend on that service. It otherwise appears limited to fetching and formatting public news rankings.
Review Dimensions
- Purpose & Capability
- okThe stated purpose is to fetch hot-news rankings, and the artifact only describes fetching and formatting public news data from named sources.
- Instruction Scope
- okInstructions are bounded to specific news endpoints, supported source names, response parsing, and output formatting.
- Install Mechanism
- okThere is no install spec, no code, no required binaries, and no environment variables or credentials.
- Credentials
- okThe only disclosed external interaction is a purpose-aligned API request to retrieve public news content.
- Persistence & Privilege
- okNo persistence, background execution, privileged access, credential use, or local data access is described.