← Back to Skills Marketplace
360
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install panews
Description
Entry point for reading PANews cryptocurrency / blockchain news and market narratives. Triggers: today's headlines, breaking news, trending rankings, article...
Usage Guidance
This skill appears to be a coherent PANews reader: the SKILL.md workflows and bundled CLI implement article search, rankings, events, and briefings. However, before installing: 1) Inspect scripts/cli.mjs in full for network endpoints, calls to eval/child_process, direct fs reads, or usages of process.env — look for 'fetch', 'https', 'http', 'require("child_process")', 'exec', 'spawn', 'fs.readFile', and direct references to process.env keys. 2) Open SKILL.md in a text editor that can reveal invisible characters (zero-width/Unicode control chars) and remove or verify them — the scan flagged such characters. 3) Prefer running the CLI in a restricted sandbox first (no secrets, network controls) to observe behavior. 4) If you do not trust the publisher or cannot review the CLI code, do not enable autonomous invocation or install the skill. 5) Ask the publisher for source repository or homepage and a signed release; absence of an authoritative source reduces trust. If you want, I can scan the full CLI text for suspicious patterns (network calls, exec, env usage) — provide the full file content and I will analyze it.
Capability Analysis
Type: OpenClaw Skill
Name: panews
Version: 0.2.2
The skill bundle is a legitimate news reader for the PANews cryptocurrency platform. The primary component is a CLI script (scripts/cli.mjs) that fetches news articles, rankings, and event data from the official PANews API (universal-api.panewslab.com). While the CLI script is minified, its logic strictly follows the documented workflows in SKILL.md and the references directory, using standard libraries like Zod for validation and Turndown for HTML-to-Markdown conversion. No evidence of data exfiltration, unauthorized file access, or malicious prompt injection was found.
Capability Assessment
Purpose & Capability
Name/description (PANews reader) align with the workflows and the included CLI commands (list-articles, get-article, search-articles, get-hooks, etc.). No environment variables, binaries, or config paths are requested that would be unrelated to a news-reader skill.
Instruction Scope
SKILL.md restricts content to PANews reporting and provides explicit, scoped workflows for searches, briefings, and article reads. However it instructs the agent to execute a local Node CLI (node {Skills Directory}/panews/scripts/cli.mjs). Running that CLI gives the skill the ability to execute arbitrary JS on the host environment (network I/O, file access, environment access) — which is consistent with fetching news but broad in practice. The SKILL.md also contains a detected 'unicode-control-chars' injection signal, meaning there may be invisible characters in the text that could be hiding instructions or manipulations; that is unexpected for a normal documentation file.
Install Mechanism
No install spec (instruction-only) and the JS CLI is bundled inside the skill (scripts/cli.mjs). Bundling the executable is fine for an instruction-driven skill, but because the CLI is a large executable that will run locally, reviewers should inspect it for network endpoints, file I/O, or child_process usage. There are no external download URLs or extract steps, which reduces supply-chain risk.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. That is proportionate for a read-only news reader. However, running the bundled CLI could still access process.env or local files if its code chooses to — the SKILL.md does not request or justify any secrets.
Persistence & Privilege
always is false and the agent policy allows implicit invocation (allow_implicit_invocation: true) which is typical for skills. The skill does not request elevated or persistent system-level privileges in the metadata. There is no install step that modifies other skills or system configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install panews - After installation, invoke the skill by name or use
/panews - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.2
- Internal documentation refined: the "Scripts" section was cleaned up for clarity.
- Extraneous runtime behavior and code reference details were removed from SKILL.md.
- No functional or API changes; CLI usage and command list remain the same.
v0.2.1
panews v0.2.1
- Added explicit documentation of external API usage: PANews reader commands now clarify outbound HTTPS requests to https://universal-api.panewslab.com.
- Highlighted that creator credentials are not required and that the CLI does not access local files unless specified.
- Included links to primary source code for increased transparency: panews.ts, commands, and utils directories.
- Improved scripting documentation to clarify runtime behavior and code bundling.
v0.2.0
**Major update with expanded workflows and a unified CLI interface**
- Replaces individual workflow scripts with a single `cli.mjs` entry point for all news reader commands.
- Adds support for more workflows: columns, series, topics, events, event calendar, hooks, and editorial picks.
- Provides new reference docs for each supported workflow, enabling clearer task routing and examples.
- Updates language handling to accept broader locale strings (e.g., `en-US`, `zh-TW`) mapped to supported PANews languages.
- Removes older, fragmented scripts and reference files to streamline usage and documentation.
v0.1.0
Initial release of PANews skill providing structured, read-only access to PANews API content.
- Supports article search, article detail lookup, listings, rankings, and daily must-reads via bundled workflows.
- Responses localized using the PA-Accept-Language request header.
- Includes guidelines for workflow selection, language options, and supported use cases.
- Enforces read-only access; write or publisher actions are not supported in this skill.
- Provides detailed failure handling and routing rules for optimal result accuracy.
Metadata
Frequently Asked Questions
What is Panews?
Entry point for reading PANews cryptocurrency / blockchain news and market narratives. Triggers: today's headlines, breaking news, trending rankings, article... It is an AI Agent Skill for Claude Code / OpenClaw, with 360 downloads so far.
How do I install Panews?
Run "/install panews" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Panews free?
Yes, Panews is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Panews support?
Panews is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Panews?
It is built and maintained by Seven Du (@medz); the current version is v0.2.2.
More Skills