Back to skill
Skillv1.0.0
ClawScan security
military-news-collector · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 8:11 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This instruction-only skill is internally consistent: it describes a news-aggregation task and its runtime instructions (web searches, source lists, deduplication, importance scoring) align with that purpose and request no unrelated credentials or installs.
- Guidance
- This skill appears coherent for aggregating military news, but note it requires the agent to perform many web requests and fetch full article text. Before enabling: ensure you trust the agent's web-fetch capability (requests will reach many public news sites), decide whether paywalled sources should be fetched or simply flagged, and be aware aggregated results may include biased or state-affiliated outlets listed in sources.md. If you want tighter control, restrict autonomous invocation, audit the agent's web fetch logs, or limit the allowed source list.
Review Dimensions
- Purpose & Capability
- okName/description (military news aggregation and prioritization) match the SKILL.md: it prescribes layered web searches, source lists, and an output format. There are no unrelated requirements (no cloud keys, no unusual binaries).
- Instruction Scope
- noteInstructions explicitly require fetching web content (e.g., 'use web_fetch 获取全文') and performing many searches (8–12+). That implies the agent must have internet/web-fetch capability and will retrieve full articles (including paywalled items marked as '需订阅'). The instructions do not ask to read local files, access credentials, or transmit data to external endpoints other than the news sources. This is expected for a web-aggregator but depends on the agent's web access policy.
- Install Mechanism
- okNo install spec and no code files — lowest-risk delivery model. Nothing is written to disk by the skill itself.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. The level of access requested (web fetches to public news sites) is proportional to the stated purpose.
- Persistence & Privilege
- okalways is false and the skill does not request persistent/privileged agent-wide changes. It does not modify other skills or system configurations.
