Intelligence Suite

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent public-news scraping skill, with some ordinary cautions around npm dependencies, broad web fetching, and untrusted article text being passed to the agent.

This skill looks suitable for public news monitoring. Before installing, be aware that npm install will download dependencies, the scripts may fetch article pages beyond the named sources, and any scraped web text should be treated as untrusted content during summarization.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

Running the skill may make outbound requests to arbitrary public article websites selected by the feeds, not only to the listed source domains.

Why it was flagged

The script follows article links obtained from external feeds, including Hacker News story URLs, and fetches their content. This is purpose-aligned for a news scanner, but it means the skill may contact third-party domains beyond the named feeds.

Skill content

link: s.url || `https://news.ycombinator.com/item?id=${s.id}`,
...
const content = await fetchContent(item.link);

Recommendation

If you need strict network boundaries, add an allowlist or require confirmation before deep-scraping off-source article links.

NoteHigh Confidence

ASI01: Agent Goal Hijack

What this means

A malicious or noisy article page could include text that tries to influence the agent's behavior during summarization.

Why it was flagged

Scraped webpage text is printed into a structured block intended for the main agent to consume. Public web content can contain prompt-like text, so it should be treated as untrusted source material.

Skill content

console.log(`CONTENT_SNIPPET: ${content}`);

Recommendation

Instruct the agent to treat all retrieved article snippets as untrusted data and to ignore any instructions contained inside scraped content.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

A future npm install could pull different dependency versions than the author tested.

Why it was flagged

The skill relies on npm packages with semver ranges and no lockfile in the provided artifacts. This is common for Node-based skills but means installs can resolve to newer package versions.

Skill content

"dependencies": {
  "axios": "^1.6.0",
  "cheerio": "^1.0.0-rc.12",
  "rss-parser": "^3.13.0"
}

Recommendation

Use a lockfile or pinned dependency versions if reproducible installs are important.