newsclawd

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/crypto.py connects to api.binance.com to fetch live market data. This is a well-known cryptocurrency exchange and is consistent with the skill's stated purpose. \n- [EXTERNAL_DOWNLOADS]: The script scripts/rss.py downloads data from remote RSS feeds specified by the user to monitor for updates. \n- [COMMAND_EXECUTION]: The script scripts/notify.py utilizes subprocess.run to call the host agent's native CLI (openclaw message send) to dispatch alerts to the user's Telegram. This is the standard method for integration within the OpenClaw environment. \n- [SAFE]: The skill follows security best practices by advising users to store API keys in local configuration files rather than hardcoding them in scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 01:26 AM
Security Audit — agent-trust-hub — newsclawd