Panews

Entry point for reading PANews cryptocurrency / blockchain news and market narratives. Triggers: today's headlines, breaking news, trending rankings, article...

This skill appears to be a coherent PANews reader: the SKILL.md workflows and bundled CLI implement article search, rankings, events, and briefings. However, before installing: 1) Inspect scripts/cli.mjs in full for network endpoints, calls to eval/child_process, direct fs reads, or usages of process.env — look for 'fetch', 'https', 'http', 'require("child_process")', 'exec', 'spawn', 'fs.readFile', and direct references to process.env keys. 2) Open SKILL.md in a text editor that can reveal invisible characters (zero-width/Unicode control chars) and remove or verify them — the scan flagged such characters. 3) Prefer running the CLI in a restricted sandbox first (no secrets, network controls) to observe behavior. 4) If you do not trust the publisher or cannot review the CLI code, do not enable autonomous invocation or install the skill. 5) Ask the publisher for source repository or homepage and a signed release; absence of an authoritative source reduces trust. If you want, I can scan the full CLI text for suspicious patterns (network calls, exec, env usage) — provide the full file content and I will analyze it.

Type: OpenClaw Skill Name: panews Version: 0.2.2 The skill bundle is a legitimate news reader for the PANews cryptocurrency platform. The primary component is a CLI script (scripts/cli.mjs) that fetches news articles, rankings, and event data from the official PANews API (universal-api.panewslab.com). While the CLI script is minified, its logic strictly follows the documented workflows in SKILL.md and the references directory, using standard libraries like Zod for validation and Turndown for HTML-to-Markdown conversion. No evidence of data exfiltration, unauthorized file access, or malicious prompt injection was found.