Tech Weekly Briefing

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherent for fetching public tech RSS feeds and making briefings, but users should review its local scripts, curl use, and optional cron automation before enabling it.

Before installing, review the bundled scripts, expect outbound requests to the listed media RSS feeds, and only add the cron entries if you want the briefing to run automatically on an ongoing basis.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill will make external web requests and may use a browser-like curl request for one source.

Why it was flagged

The skill explicitly discloses that one RSS source is fetched with curl to bypass a 403 response. This is limited to a named public feed and fits the news-fetching purpose, but it is a tool-use/access-policy detail users should notice.

Skill content
| **The Information** | https://www.theinformation.com/feed | ✅ Active | curl (bypasses 403) |
Recommendation

Use the skill only if you are comfortable with these RSS fetches; keep the source list fixed and review any changes to fetch behavior.

What this means

If configured, the skill can continue fetching news and writing local output on a schedule without a fresh prompt each time.

Why it was flagged

The artifact provides a cron entry that, if the user installs it, will run the skill daily and write logs until the cron entry is removed.

Skill content
0 0 * * * cd ~/.openclaw/workspace-group/skills/tech-weekly-briefing && python3 scripts/generate-briefing.py daily >> /tmp/tech-weekly-cron.log 2>&1
Recommendation

Only add the cron jobs if you want ongoing automation, and know how to remove them from crontab if you no longer use the skill.

What this means

Users have less provenance context for the bundled scripts and may need to discover runtime dependencies such as Python or curl themselves.

Why it was flagged

The registry metadata provides limited provenance and dependency information even though the package includes runnable scripts. This does not show malicious behavior, but it makes manual review more important.

Skill content
Source: unknown; Homepage: none; Required binaries ... none; No install spec — this is an instruction-only skill; Code file presence: 3 code file(s)
Recommendation

Review the included scripts before running them and verify that any local tools they invoke are expected.