Fs Street

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says: fetch public Farnam Street RSS articles, with only minor setup and network-access considerations.

This looks safe for its stated purpose. Before installing, be aware that it may run a local Python script, install feedparser and requests, and make outbound requests to the public Farnam Street RSS feed.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Using the skill will contact fs.blog to retrieve public RSS content.

Why it was flagged

The helper script performs an outbound network request to the declared Farnam Street RSS feed, which is expected for this skill but should be understood by users.

Skill content

response = requests.get(RSS_URL, timeout=REQUEST_TIMEOUT)

Recommendation

Allow network access only if you are comfortable with the skill fetching data from Farnam Street.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing dependencies could pull current versions from the package index rather than a reviewed, pinned set.

Why it was flagged

The setup guidance uses unpinned third-party Python packages rather than a locked install specification; this is purpose-aligned but introduces normal package supply-chain considerations.

Skill content

**Requirements**: `pip install feedparser requests`

Recommendation

Install dependencies in a virtual environment and, if supply-chain assurance matters, pin or review the package versions before use.