Nm Tome Discourse

>- Scan community discussion channels (HN, Lobsters, Reddit, tech blogs) for experience reports and opinions on a topic

Security Scan

The skill's requirements and instructions are consistent with its stated purpose (scanning public discussion channels); it is instruction-only, requests no credentials, and uses public APIs/web search as expected.

Purpose & Capability

Name/description (scan HN, Lobsters, Reddit, blogs) align with the actions in SKILL.md (construct search URLs, call HN Algolia, Reddit JSON, site:lobste.rs, websearch). No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

Instructions stay within the stated purpose (web fetches and parsing). However the SKILL.md references runtime helpers (tome.channels.discourse.* functions, WebFetch/WebSearch, Finding objects) and says full functionality requires the Claude Code plugin — this means the instructions assume platform-provided functions that may not exist in all agent environments. That is a functional/integration note rather than a security mismatch.

Install Mechanism

No install spec and no code files are present; instruction-only skills are lowest-install-risk since nothing is written to disk.

Credentials

No environment variables, credentials, or config paths are requested, which is proportionate for a public-web-search/discourse aggregator.

Persistence & Privilege

always:false and no indications of modifying other skills or system settings. The skill does not request persistent presence or elevated privileges.

Assessment

This skill is instruction-only and appears coherent for gathering public community discussion. Before installing, note: (1) it assumes platform helpers (tome.channels.discourse.* and WebFetch/WebSearch) — without the companion plugin the agent may fail or attempt its own ad-hoc web requests; (2) it performs web queries to external services (HN Algolia, Reddit JSON endpoints, site searches) so do not include any private tokens or sensitive content in search queries; (3) automated scraping may be subject to rate limits or site terms of service. If you need guaranteed behavior, install the recommended companion plugin or verify that your agent runtime provides the referenced WebFetch/WebSearch functions.

Night Market Skill — ported from claude-night-market/tome. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

Discourse Search

When To Use

• Gathering community opinions on a technology or approach
• Finding experience reports from HN, Reddit, or Lobsters

When NOT To Use

• Academic research (use /tome:papers)
• Code examples (use /tome:code-search)

Scan community channels for discussions on a topic.

Channels

• Hacker News: Algolia API at hn.algolia.com
• Lobsters: WebSearch with site:lobste.rs
• Reddit: JSON API (append .json to URLs)
• Tech blogs: WebSearch targeting curated domains

Workflow

1. Build search URLs/queries per channel using tome.channels.discourse.* functions
2. Execute via WebFetch (APIs) or WebSearch (fallback)
3. Parse responses into Finding objects
4. Merge across sources with source attribution