← Back to Skills Marketplace
pavanxs

Sonarbay News

by pavanxs · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
98
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install sonarbay-news
Description
Search and analyze global news using SonarBay News Intelligence. Provides real-time access to 7 days of worldwide news coverage via CLI or REST API. Use when...
Usage Guidance
This skill looks like a legitimate news CLI/REST integration, but exercise caution before running the installer commands it documents. Never pipe remote scripts directly into a shell without reviewing them: fetch the installer (curl https://sonarbay.com/install.sh -o install.sh) and inspect its contents and checksums first. Prefer using documented package managers or official release pages when available. If you must install, do so in an isolated environment (container or VM), verify HTTPS and the domain, look for published checksums or signed releases, and consider using the REST endpoints directly (curl against https://sonarbay.com/v1/...) to avoid executing third-party install scripts. Because the registry entry has no homepage and the source is 'unknown', verify the vendor and review the installer before trusting it with your system.
Capability Analysis
Type: OpenClaw Skill Name: sonarbay-news Version: 1.0.0 The SKILL.md file instructs the AI agent to install a CLI tool using high-risk execution patterns: 'curl | sh' for Mac/Linux and 'irm | iex' for Windows. These commands download and execute remote scripts from 'https://sonarbay.com', which constitutes a Remote Code Execution (RCE) risk. While these are common installation methods for some tools, in the context of an AI agent skill, they represent a significant attack surface for prompt injection and unauthorized system access, particularly when the stated news-searching functionality is already available via the provided REST API.
Capability Assessment
Purpose & Capability
Name/description (news search, trending, counts) align with the documented CLI commands and REST endpoints. No unrelated credentials, binaries, or config paths are requested — the declared purpose matches what the instructions show.
Instruction Scope
SKILL.md stays within the news-search domain (CLI usage, REST endpoints, examples). It does not instruct reading local files or unrelated environment variables. However, the Install section explicitly tells users to pipe remote shell/PowerShell scripts into a shell (curl https://sonarbay.com/install.sh | sh and irm https://sonarbay.com/install.ps1 | iex), which expands scope to executing arbitrary remote code on the host.
Install Mechanism
There is no formal install spec in the registry, but the documentation instructs running remote install scripts directly from sonarbay.com via pipe-to-shell and PowerShell 'iex'. This pattern downloads and executes remote code without checksums or release verification and is high-risk. Although the domain is the service domain (sonarbay.com), it is not a vetted release host like a known package registry; the script contents are not included for review.
Credentials
The skill declares no required environment variables or credentials and the REST endpoints state 'No authentication required'. That is proportionate for a public read-only news API. There is no request for unrelated secrets or system credentials in the SKILL.md.
Persistence & Privilege
Skill metadata does not request always-on inclusion or special privileges. The CLI's install and 'sonarbay update' command imply the installed tool will persist on the system if installed by the user; this is expected but should be treated as installing third-party software (inspect installer first).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install sonarbay-news
  3. After installation, invoke the skill by name or use /sonarbay-news
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of SonarBay News Intelligence. - Provides real-time access to 7 days of global news (~100K+ articles, updated every 15 minutes). - Search news, analyze mention counts, and discover trending entities using a CLI or REST API. - Flexible filtering by keyword, country, source, time window, and entity type. - All commands support JSON output for easy scripting and integration. - No authentication required; REST API serves as a fallback for news data access.
Metadata
Slug sonarbay-news
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Sonarbay News?

Search and analyze global news using SonarBay News Intelligence. Provides real-time access to 7 days of worldwide news coverage via CLI or REST API. Use when... It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.

How do I install Sonarbay News?

Run "/install sonarbay-news" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Sonarbay News free?

Yes, Sonarbay News is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Sonarbay News support?

Sonarbay News is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Sonarbay News?

It is built and maintained by pavanxs (@pavanxs); the current version is v1.0.0.

💬 Comments