Daily News Brief
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says—collect and publish a scheduled news brief—but users should notice that it installs Node dependencies, can create scheduled background runs, and may post to configured channels.
Before installing, confirm you trust the included Node scripts and npm dependencies, review the configured news sources, recipients, and output channels, and only enable cron/Task Scheduler/systemd if you want the brief to run and publish automatically every day.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may pull third-party JavaScript packages even though the registry metadata does not declare Node/npm requirements.
The skill asks the user to install external npm packages, while registry requirements declare no required binaries or environment setup. This is a metadata gap, but installing these packages is expected for a Node-based news scraper.
npm install axios cheerio node-cron
Review package.json/package-lock.json and run npm install only from the intended skill directory.
Running the installer will execute local scripts, fetch news, and create/update local brief files as part of setup.
The optional installer runs package installation and then performs a test run of the news brief script. This is disclosed in the installer and aligned with setup, but it is still local code execution during installation.
npm install ... node news-brief.js --run-now
Read install.sh before running it and only execute it if you want the setup test run to occur.
If enabled, the skill will continue running every morning without a new manual prompt.
The installer can add a daily cron job, and SKILL.md also documents scheduled execution. This persistence is expected for an automatic daily brief, but users should explicitly choose it.
CRON_JOB="0 8 * * * cd $(pwd) && node news-brief.js >> logs/cron.log 2>&1"
Enable the scheduled task only if you want ongoing automatic execution, and remove the cron/task-scheduler/systemd entry when no longer needed.
A configured recipient or chat could receive daily automatically generated news summaries.
The skill is configured to publish generated briefs to an external messaging channel/recipient. This is consistent with its purpose, but automatic publication can distribute scraped content without per-message review.
"outputChannels": ["feishu", "console"], "recipients": ["ou_63fe82c05165ad03801998f88ef81025"]
Verify outputChannels and recipients before enabling scheduled publication, especially in shared or public workspaces.