Scan Report
5 /100
feedship-ai-daily
Generate daily AI news digest from feedship subscriptions
Pure documentation skill containing only SKILL.md and REPORT_FORMAT.md with no executable code, scripts, or sensitive operations. All behavior is declared and uses only well-known CLI tools (openclaw, feedship, uv).
Safe to install
This skill is safe to use. No action required.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations in skill |
| Network | READ | READ | ✓ Aligned | External tools (openclaw, feedship) handle all network access |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md declares openclaw cron commands and feedship CLI usage |
| Environment | NONE | NONE | — | No environment access in skill |
| Skill Invoke | NONE | NONE | — | No skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
8 findings
Medium External URL 外部 URL
https://aiweekly.com REPORT_FORMAT.md:18 Medium External URL 外部 URL
https://techcrunch.com REPORT_FORMAT.md:18 Medium External URL 外部 URL
https://blog.google/ai REPORT_FORMAT.md:22 Medium External URL 外部 URL
https://reuters.com REPORT_FORMAT.md:30 Medium External URL 外部 URL
https://blog.google/ai/new-model REPORT_FORMAT.md:170 Medium External URL 外部 URL
https://aiweekly.com/multimodal REPORT_FORMAT.md:178 Medium External URL 外部 URL
https://api.telegram.org/bot SKILL.md:54 Medium External URL 外部 URL
https://open.feishu.cn/app SKILL.md:79 File Tree
2 files · 15.4 KB · 587 lines Markdown 2f · 587L
├─
REPORT_FORMAT.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Pure documentation skill with no executable code
✓ All tool dependencies (uv, openclaw, feedship) declared in SKILL.md
✓ No credential harvesting or sensitive data access
✓ No obfuscation, base64-encoded content, or hidden instructions
✓ No curl|bash or wget|sh remote script execution patterns
✓ External URLs are legitimate services (Telegram API, Feishu) for setup purposes
✓ No supply chain risks as no dependencies or scripts present
✓ Clear documentation structure with troubleshooting section