Turkey News
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: turkey-news Version: 1.0.0 The skill is designed to fetch and summarize news from legitimate Turkish RSS feeds. The `SKILL.md` instructions guide the agent to execute a local script (`scripts/fetch-news.js`), filter its output, summarize the news, and notify the user via Telegram. The `scripts/fetch-news.js` script makes network requests only to the predefined, legitimate news RSS URLs, parses the content, and outputs JSON. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's security or intended function. The use of regex for XML parsing is a potential vulnerability in robustness but does not indicate malicious intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If enabled, the skill may keep running on a schedule and send news alerts without a new manual prompt each time.
This describes scheduled autonomous runs with outbound notifications. It is disclosed and purpose-aligned, but it is still persistent behavior the user should explicitly approve.
Günde 2-3 kez cron job ile çalıştır. Agent haberleri çeker, filtreler ve önemli olanları Telegram'dan bildirir.
Only configure the cron job if you want recurring alerts, and keep clear instructions for disabling or changing the schedule.
A misconfigured Telegram integration could send notifications to the wrong chat or use broader messaging access than intended.
Sending a Telegram message may require access to a Telegram bot, account, or contact. The instruction is purpose-aligned, but the artifacts do not define the credential or recipient scope.
Telegram'dan Usta'ya bildir
Before enabling notifications, verify the Telegram bot/account, chat recipient, and permissions are limited to the intended news-alert use.
The skill may fail or require manual setup on systems without Node installed.
The skill documents a Node command, while the provided requirements list no required binaries. This is a runtime declaration gap, though the referenced script is included and uses only built-in Node modules.
node scripts/fetch-news.js
Confirm Node is available before use, and treat the included script as the only code that should be run for this skill.