Security checks across malware telemetry and agentic risk
This news-digest skill mostly matches its stated purpose, but it needs review because it can use a global OpenClaw API config and weakens HTTPS certificate checks during scraping.
Review before installing. Use it only if you are comfortable with scraped article content being sent to a configured LLM provider, and prefer setting NEWS_DIGEST_LLM_API_KEY and NEWS_DIGEST_LLM_BASE_URL explicitly instead of relying on a global OpenClaw config. Be aware it writes digest files to the Desktop and workspace and stores articles in a local SQLite database. The TLS verification bypass should be fixed or accepted consciously because it can let spoofed or modified news content enter the digest.
)
try:
with urllib.request.urlopen(req, timeout=300) as resp:
result = json.loads(resp.read().decode('utf-8'))
return result.get('choices', [{}])[0].get('message', {}).get('content', '')
except Exception as e:64/64 vendors flagged this skill as clean.