Researches latest AI news, summarizes 5 top stories with sources.

This skill appears coherent and low-risk: it will read public news sites and save a Markdown report in ~/clawd/reports. Before installing, decide whether you want reports written automatically to that path (you can change it) and whether to enable the optional email delivery — if you enable email, supply credentials only to trusted services and understand that report contents will be sent externally. If you want to avoid any data leaving your machine, disable the email tool or ensure it's not configured.

Type: OpenClaw Skill Name: ai-news-researcher Version: 1.0.0 The skill's stated purpose is benign, involving web research and local file saving. However, the instruction in `SKILL.md` to save a file with a name like `ai-news-$(date +%Y%m%d).md` uses shell command substitution. This introduces a potential shell injection vulnerability if the AI agent's underlying execution environment interprets this string directly in a shell context without proper sanitization, allowing for arbitrary command execution if an attacker could control parts of the filename.