ClawHub

Tech news from RSS(rich terminal support)

v1.0.0

Fetch and display international tech news from 8 curated RSS feeds with summaries, titles, links, and timestamps in a markdown table format.

⭐ 0· 74·0 current·0 all-time
byJay@goog
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description claim (aggregate 8 tech RSS feeds and render a markdown/table view) aligns with the provided SKILL.md and the bundled Python script. No unrelated credentials, binaries, or services are requested.
✓
Instruction Scope
SKILL.md tells the agent to run the bundled script and install three Python libraries if missing. The script fetches only the listed RSS URLs, parses them, displays tables, allows opening article links in the browser, and caches results. It does not attempt to read unrelated system files or exfiltrate data to unknown endpoints. It does create and use a cache directory (~/.tech_news_cli/cache), which is expected for this use case.
✓
Install Mechanism
There is no automated install spec; SKILL.md suggests installing common Python packages via pip (feedparser, requests, rich). This is proportional and uses well-known packages rather than downloading arbitrary executables or archives.
✓
Credentials
The skill declares no environment variables or credentials and the code does not attempt to read secrets. The only external network targets are the explicit RSS feed URLs for the listed news sites.
✓
Persistence & Privilege
always:false (default). The script creates a local cache directory under the user's home and stores JSON cache files there; this is limited in scope and proportional to the feature. The skill does not request system-wide configuration changes or access other skills' credentials.
Assessment
This skill appears to do exactly what it says: fetch public RSS feeds, cache results in ~/.tech_news_cli/cache, and display them in the terminal. Before installing, note: (1) it will make outbound HTTP(S) requests to the listed news sites, (2) it stores cached JSON files under your home directory (you can inspect or remove them anytime), and (3) it will open article links in your default browser if you request that. If you prefer stricter isolation, run the script in a virtual environment or container and verify dependencies are installed from PyPI or other trusted sources. If you need the agent not to call the skill autonomously, consider disabling autonomous invocation in your agent settings (the skill itself does not require autonomous privileges to function).

Like a lobster shell, security has layers — review code before you run it.

latestvk97eg23wanyjd54ahb4gey4r2984ayzz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments