X Builder Digest
v0.1.0Turn curated X/Twitter builder activity plus optional podcast/blog items into concise English and Chinese markdown digests with first-mention person blurbs,...
⭐ 0· 95·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description ask for converting social-feed JSON into English/Chinese digests; the included script (scripts/render_digest.py), sample input, and sample outputs implement exactly that functionality and require only a JSON input and an output directory.
Instruction Scope
SKILL.md instructs the agent to accept structured JSON and produce two markdown files; the script only reads the provided input JSON and writes digest-en.md and digest-zh.md. The instructions explicitly forbid including tokens, session files, or local absolute paths in outputs and the script does not attempt to read other files or environment variables.
Install Mechanism
No install spec is present and the script uses only Python standard libraries (json, html, pathlib, sys). Nothing is downloaded or written beyond the digest outputs. This is low-risk for installation.
Credentials
The skill declares no required environment variables, credentials, or config paths and the code does not access os.environ or request secrets. The PEOPLE and ZH_OVERRIDES dictionaries are static and reasonable for producing blurbs.
Persistence & Privilege
The skill is not always-enabled and does not modify agent/system configuration. It writes output files only to the user-specified output directory and does not persist credentials or alter other skills.
Assessment
This skill appears coherent and safe for its stated purpose. Before using it: run it on non-sensitive sample data first; avoid passing JSON that contains private tokens, cookies, or other secrets (the script will blindly include any text from the input in outputs); run in a sandbox or dedicated directory if you are concerned about file writes; and if you want custom person blurbs for many people, consider supplying them from a separate, reviewed JSON rather than embedding untrusted data into the input.Like a lobster shell, security has layers — review code before you run it.
latestvk972txs8dvjaj5p2j98nxnjm3d84h9f4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
