ClawAudit verdict

Telegram News Digest (Lite)

tg-news-digest-lite

88
🟢 Trusted
Low risk — reviewed by ClawAudit, behavior matches stated purpose

Fetches from network AND uses eval/Function

Telegram channel monitoring skill that scrapes public t.me/s/* pages and delivers AI-generated digests; network access is limited to declared domains (t.me, OpenAI/OpenRouter), env vars are only the OpenClaw gateway token, and behavior is consistent with the stated news aggregation purpose.

Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

0
security
60
transparency
100
maintenance

What it does

These are capability combinations: each listed behavior occurs in the skill, but ClawAudit detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.

Capability combination critical

Fetches from network AND uses eval/Function — the remote-code-execution pattern (data-flow not verified)

LLM05 · LLM06 · ASI05

Capability combination critical

Receives external input AND uses eval — the remote code-injection pattern (data-flow not verified)

LLM01 · LLM05 · ASI01 · ASI05

Capability combination high

Accesses credentials AND makes external network calls — potential credential theft

LLM02 · ASI03

Permission integrity

Makes network requests but does not declare curl/wget in required binaries

network_out

Code accesses API keys/tokens but declares no environment variables

credential_access

Findings (7)

Pattern match high

Accesses OpenClaw config/secrets directly

SKILL.md · code · ~/.openclaw/openclaw.json

Pattern match high

Dynamic import() — loads module at runtime

SKILL.md · code · import('

Pattern match medium

Instructs covert action — may act without user awareness

SKILL.md · prose · downgraded · silently

Pattern match medium

HTTP request to bare IP address — common in malicious payloads

src/index.js · prose · downgraded · http://127.0.0.1

Pattern match low

Contains shortened/invite URL

SKILL.md · frontmatter · t.me/s

Pattern match low

Popular HTTP library — network access

package.json · prose · downgraded · axios

Pattern match low

Accesses sensitive environment variables

src/summarizer.js · prose · downgraded · process.env.OPENCLAW_GATEWAY_TOKEN

Permissions & capabilities

No declared permissions — minimal attack surface.

network_incredential_accessdynamic_evalnetwork_out
Check another skill Browse the registry Auditing your own skills or configs? Use the API