ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Tageblatt Headlines

v1.0.0

Download and archive daily Schlagzeilen from https://www.tageblatt.de/. Use when Master asks for TAGEBLATT headlines, wants them saved locally, or needs an automated 07:00 workflow that fetches and forwards the latest headlines.

⭐ 0· 680·0 current·0 all-time
byAndreas Jung@zopyx
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the provided code and instructions. The included script performs a simple HTTP GET of https://www.tageblatt.de/, extracts <h2 class="article-heading"> blocks, and writes text/JSON output. No unrelated binaries, env vars, or cloud credentials are requested.
ℹ
Instruction Scope
SKILL.md stays on-topic (run script, schedule cron, save/commit archives). One notable instruction is the cron payload that asks the agent to "Send Master the list via Telegram" — the skill does not declare or provide Telegram credentials, so sending would rely on other agent integrations or user-provided tokens. Otherwise the instructions do not direct the agent to read unrelated files or secrets.
✓
Install Mechanism
No install spec — instruction-only plus a small included Python script that uses only standard libraries (urllib, re). Nothing is downloaded from third-party URLs and nothing is written to system locations beyond the user-specified output path.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. The only external network access is to the stated source site. The Telegram-send suggestion in the docs may require credentials elsewhere, but the skill itself does not demand them.
✓
Persistence & Privilege
always:false and model invocation enabled (default). The skill does not request permanent platform-level presence or make modifications to other skills or system-wide settings.
Assessment
This skill appears to do exactly what it claims: fetch and save Tageblatt headlines. Before installing, consider: (1) Confirm you have permission to scrape the site and check robots.txt/terms of service. (2) If you plan automated delivery (Telegram), ensure you configure tokens securely elsewhere — the skill does not include or request Telegram credentials. (3) The parser is a simple regex and may break if the site structure or consent banners change; review HEADING_PATTERN if you see missing headlines. (4) The script writes files under paths you supply (e.g., data/tageblatt/) — review retention and commit practices to avoid storing sensitive data. (5) Run the script locally once to verify behavior and outputs before enabling automation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f817tbh1gcavn6mj9wd5bws812f3j

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments