Danish News Feeds

Comprehensive Danish News RSS Aggregator - combines 100+ Danish RSS feeds into category-based unified feeds. Produces 6 curated RSS feeds: - danish-all.xml (...

Security Scan

The skill appears to do what it claims (aggregate Danish RSS feeds) and requests no credentials, but it contains sloppy/unsafe code (disabled TLS verification, a malformed feed entry, and mismatched install/hosting instructions) that you should review before running or exposing publicly.

Purpose & Capability

Name, description, SKILL.md, feeds.json, and the two Python scripts all align with a feed-aggregation purpose. No unexpected credentials, binaries, or external control-plane access are requested.

Instruction Scope

Runtime instructions are scoped to installing two Python packages and running the aggregator; they tell you to edit feeds.json which is appropriate. Concerns: aggregate_feeds.py explicitly disables TLS certificate verification (ssl.CERT_NONE) which weakens security of all network fetches. SKILL.md suggests building a Docker image but there is no Dockerfile included — this is an inconsistency (quality/packaging issue).

Install Mechanism

This is an instruction-only skill (no install spec). The SKILL.md requests pip installs of feedparser and python-dateutil — appropriate for the included code. There are no downloads from arbitrary URLs or archive extraction steps.

Credentials

No environment variables, credentials, or config paths are required or declared. The code does not read secrets. The aggregator performs outbound HTTP(S) requests to the listed feed URLs only.

Persistence & Privilege

Skill is not always-enabled and does not request elevated platform privileges. It writes output files to an output/ directory in the repository and does not modify other skills or system-wide settings.

What to consider before installing

This package generally matches its description (an RSS aggregator) and does not ask for secrets — that is good — but review and fix the code before running it on a public server. Specific actions to consider: - Do not run it without inspection in a production environment. Run it in a local sandbox or VM first. - Fix the TLS issue: aggregate_feeds.py creates an SSL context with check_hostname=False and verify_mode=ssl.CERT_NONE; replace that with a normal verified context so feed fetches validate certificates. Disabled TLS verification exposes you to MitM attacks. - Correct the malformed feed entry in aggregator.py (the sports FEEDS block contains a corrupted/invalid line) — that will likely raise a parse/runtime error. - SKILL.md suggests Docker but no Dockerfile is included; if you plan to containerize, review and create an appropriate Dockerfile and ensure file permissions and network exposure are correct. - The aggregator makes outbound requests to many third-party sites. If you host this publicly, your server IP will be visible to those sites; consider using a proxy or hosting in an environment you control and rate-limit requests to avoid being blocked. - Optionally review feeds.json to remove or change any feeds you don't trust. The included combined_danish_news.xml is a sample output and contains third-party content — don’t publish it without ensuring licensing and attribution compliance. If you want, I can point out the exact lines to change for the TLS disabling and show a fixed snippet, or produce a minimal Dockerfile and tests to verify the scripts run safely.

Aggregates 100+ Danish RSS feeds into category-based unified RSS feeds.

Quick Start

# Install dependencies
pip install feedparser python-dateutil

# Run aggregator
python3 aggregator.py

# Output feeds in output/ directory
ls output/

Configuration

Edit feeds.json to customize which feeds to include:

{
  "refresh_interval": 900,  // seconds (15 min)
  "max_items_per_feed": 50,
  "deduplicate": true,
  "feeds": {
    "national": ["https://..."],
    "sports": ["https://..."]
  }
}

Output Feeds

Feed	Description	Sources
danish-all.xml	All news combined	Top 30
danish-national.xml	DR, Berlingske, Politiken	8
danish-regional.xml	Nordjyske, Fyens, etc	5
danish-sports.xml	Bold, Tipsbladet, TV2 Sport	8
danish-business.xml	Finans, Nationalbanken	6
danish-tech.xml	Version2, Ingeniøren	10
danish-english.xml	The Local, CPH Post	5

Features

• ✅ Category-based feeds
• ✅ Deduplication (same article from multiple sources)
• ✅ Source authority ranking (DR > major newspapers > regional)
• ✅ Time filtering (last 24h by default)
• ✅ RSS 2.0 compliant
• ✅ UTF-8 encoding
• ✅ Auto-refresh (15 min interval)
• ✅ Media RSS extensions for images

Hosting

Self-Host (Docker)

docker build -t danish-news-aggregator .
docker run -d -p 8080:8080 danish-news-aggregator

Cron Job

# Add to crontab
*/15 * * * * cd /path/to/aggregator && python3 aggregator.py

Subscribe

Add these URLs to your RSS reader:

• https://your-domain.com/danish-all.xml
• https://your-domain.com/danish-national.xml
• https://your-domain.com/danish-regional.xml
• https://your-domain.com/danish-sports.xml
• https://your-domain.com/danish-business.xml
• https://your-domain.com/danish-tech.xml
• https://your-domain.com/danish-english.xml

Credits

Aggregates from: DR, Berlingske, Politiken, Information, Nordjyske, Fyens, JydskeVestkysten, Bold.dk, Tipsbladet, TV2 Sport, Finans, Nationalbanken, Version2, Ingeniøren, Computerworld, The Local Denmark, The Copenhagen Post, and many more.

---

Danish News Feeds v1.0 - Built by Nexus Orchestrator