ClawHub

Global News By Opera News

v1.0.3

Stay informed with Global News — get breaking news, top headlines, local city news, and full-text article search across Europe, Americas, Latin America, and...

⭐ 1· 210·3 current·3 all-time
by@zerokileom
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description promise global news. SKILL.md only requires calling a public HTTP news API and formatting results; no binaries, installs, or credentials are requested. This is proportionate. Minor concern: 'About' references operanewsapp.com but the API base is news-af.feednews.com — the origin of the feed is not documented in the skill metadata (source/homepage unknown), so confirm the feed is an official Opera News endpoint before trusting it.
✓
Instruction Scope
Instructions are narrowly scoped to: infer country/language from user input, pick an appropriate API endpoint, call it (via Bash/curl), and format results. The SKILL.md does not ask the agent to read local files, access unrelated environment variables, or exfiltrate data. There are small documentation inconsistencies (examples use different parameter values, and one video example uses shell variables like $country inlined), but these are usage/formatting issues, not scope creep.
✓
Install Mechanism
No install spec and no code files — lowest-risk model (instruction-only). Nothing will be written to disk by the skill itself.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. That matches the stated behavior of calling a public HTTP feed. No secret access appears necessary or requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. Autonomous invocation is allowed (platform default) but the skill itself does not request 'always: true' or modify other skills/configuration.
Assessment
This skill appears coherent and low-risk, but take a moment before installing: 1) Verify origin — the metadata lacks a homepage and the API host (news-af.feednews.com) doesn't exactly match the operanewsapp.com domain referenced in the doc; confirm this is an official/expected feed. 2) Understand network calls — the agent will make outbound HTTP requests to the feed and include a 'product=openclaw' parameter that will identify requests; ensure that is acceptable. 3) Expect no credential access — the skill asks for no secrets, so it cannot access your cloud accounts or local files by design. 4) Check usage/terms — if you need guarantees about rate limits, privacy, or content sourcing, ask the skill author or vendor for documentation. 5) If you need higher assurance, request a homepage or official API docs and only enable the skill after confirming the feed's provenance.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a8r9674ehvtmw7ftws643s5840z5q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments