last30days
v1.0.4聚合最近 30 天的 Reddit、X/Twitter、YouTube、TikTok、Instagram、Hacker News、Polymarket、GitHub 和 web search 结果。触发条件:当用户需要 recent social research、人物近况、公司动态、竞品对比、发布反应、趋势扫描...
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (aggregate last-30-days social + web sources) match the included code and scripts. Declared binaries (python3, bash) and primary env var (AISA_API_KEY) are expected because the implementation uses an AISA-hosted planner/provider for many backends; GitHub token is optional and documented.
Instruction Scope
SKILL.md and scripts instruct the agent to run local Python scripts that fetch, score, cluster, persist, and render results. The skill reads/writes a local SQLite store and saves briefings under user paths (~/.local/share/last30days and ./ .last30days-data). It also exposes setup flows that may perform device-auth or write configuration. These behaviors are within the scope of a research aggregator but are persistent and should be expected by the user.
Install Mechanism
No install spec (instruction-only + shipped scripts). No remote downloads or archive extraction. The runtime is pure local Python/bash execution — low install risk. Review of included files is possible because source is bundled.
Credentials
Only one required env var is declared (AISA_API_KEY) and is used for AISA planner/provider calls. GH_TOKEN/GITHUB_TOKEN are optional and documented for GitHub API use. No unrelated secrets are demanded.
Persistence & Privilege
The skill persists data to local disk (SQLite DB under ./ .last30days-data and briefings under the user's home), can write setup config via the setup wizard, and may create tokens via device-auth flows. always:false; it does not force inclusion. Persistence and ability to store credentials are expected but worth noting.
Assessment
This skill appears to do what it says: aggregate recent social and web signals and store/summarize them. Before installing or running it, consider: (1) AISA_API_KEY will be sent to the AISA service — use a scoped/test key if you have concerns about sending data to that provider. (2) The skill writes a local SQLite DB and briefing files (by default under the repo and ~/.local/share); if you prefer isolation, run it in a dedicated directory or container. (3) Optional GitHub tokens may be requested only for GitHub lookups — supply them only if you need that feature. (4) The setup flows can persist config and perform device-auth; read scripts/lib/env.py and scripts/lib/aisa.py (or search for where credentials are written) if you want to audit exact persistence behavior. (5) Because the skill can run code and make network requests, run it in an environment you control (or review the bundled source) if you are concerned about data leakage.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
📰 Clawdis
Binspython3, bash
EnvAISA_API_KEY
Primary envAISA_API_KEY
latest
last30days 中文版
聚合最近 30 天的社交平台、社区论坛、预测市场、GitHub 和 grounded web 结果,再合成为一份研究简报。
触发条件
- 当用户需要最近 30 天的人物、公司、产品、市场、工具或趋势研究时使用。
- 当用户需要竞品对比、发布反应、社区情绪、近期动态总结时使用。
- 当用户需要结构化 JSON 输出,例如
query_plan、ranked_candidates、clusters、items_by_source时使用。
不适用场景
- 不适合纯百科类、没有时效要求的问题。
- 不适合只想看单一官方来源、完全不需要社区和社交信号的场景。
能力
- 通过 AISA 提供规划、重排、综合、grounded web search、X/Twitter、YouTube 和 Polymarket。
- Reddit 和 Hacker News 走公开路径。
- GitHub 走官方 GitHub API,按需使用
GH_TOKEN或GITHUB_TOKEN。 - TikTok、Instagram、Threads、Pinterest 在启用时走托管发现路径。
环境要求
- 主凭证:
AISA_API_KEY - 可选 GitHub:
GH_TOKEN或GITHUB_TOKEN - Python
3.12+
for py in /usr/local/python3.12/bin/python3.12 python3.14 python3.13 python3.12 python3; do
command -v "$py" >/dev/null 2>&1 || continue
"$py" -c 'import sys; raise SystemExit(0 if sys.version_info >= (3, 12) else 1)' || continue
LAST30DAYS_PYTHON="$py"
break
done
快速命令
bash "${SKILL_ROOT}/scripts/run-last30days.sh" "$ARGUMENTS" --emit=compact
"${LAST30DAYS_PYTHON}" "${SKILL_ROOT}/scripts/last30days.py" "$ARGUMENTS" --emit=json
"${LAST30DAYS_PYTHON}" "${SKILL_ROOT}/scripts/last30days.py" "$ARGUMENTS" --quick
"${LAST30DAYS_PYTHON}" "${SKILL_ROOT}/scripts/last30days.py" "$ARGUMENTS" --deep
"${LAST30DAYS_PYTHON}" "${SKILL_ROOT}/scripts/last30days.py" --diagnose
示例
last30days OpenAI Agents SDKlast30days Peter Steinbergerlast30days OpenClaw vs Codexlast30days Kanye West --quick
Comments
Loading comments...
