CCTV News Fetcher

Security checks across malware telemetry and agentic risk

Overview

This skill coherently fetches public CCTV news pages and summarizes them, with no evidence of credential theft, persistence, destructive actions, or hidden data access.

This appears safe for its stated purpose. Before installing, note that it runs a JavaScript crawler and makes web requests to CCTV/CNTV pages, and make sure the required runtime and dependency are installed from trusted sources.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Info
What this means

Installing the skill lets the agent run this local crawler when asked for CCTV news.

Why it was flagged

The skill relies on local command execution, but that execution is directly tied to its disclosed news-fetching purpose.

Skill content
Execute the script at `{baseDir}/scripts/news_crawler.js` using `bun` or `node`.
Recommendation

Use it only if you are comfortable with the agent running the included JavaScript script for news requests.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

The skill may not work unless the runtime and dependency are already installed, and users should recognize the npm dependency involved.

Why it was flagged

The registry metadata lists no required binaries or install spec, while the skill documentation and package files show a runtime and npm dependency are needed.

Skill content
The skill depends on `node-html-parser`. Ensure `bun` is installed in the environment.
Recommendation

Install dependencies from the included lockfile if needed, and verify bun or node is available before use.