openclaw-feeds
v3.1.1RSS news aggregator. Fetches headlines from curated feeds across three categories: news, games, and finance. Use when the user asks about current news, headlines, what's happening, what's going on, or says "what's up in news", "what's up in finance", "what's up in games", or the German equivalents "was geht mit nachrichten", "was geht mit money", "was geht mit gaming". Also activates for requests like "give me a news rundown", "latest headlines", "market news", "gaming news", "tech news", "finance roundup", or "briefing". Returns structured JSON from public RSS feeds — no API keys, no web search needed.
⭐ 5· 3.9k·23 current·24 all-time
by@nesdeq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (RSS aggregator for news/games/finance) align with the shipped code and feed lists. The script fetches the feeds listed in scripts/lists.py and produces the described JSON output. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to run the provided Python script and explicitly forbids extra web searches or fetching article pages. The script itself only fetches RSS feed URLs, parses entries, and emits JSON — it does not read unrelated files or transmit data to external endpoints beyond the feed hosts.
Install Mechanism
No install spec is present (instruction-only at registry level), and the README suggests a standard git clone + pip install feedparser. No downloads from obscure URLs or archive extraction are used. This is low-risk and proportional for the stated purpose.
Credentials
The skill requests no environment variables, credentials, or config paths. Its network access to public RSS feeds is necessary for its function. There are no unexpected secrets or broad privilege requests.
Persistence & Privilege
always is false and the skill does not request permanent presence or modify other skills/configs. Autonomous invocation (default) is allowed but this is normal for skills and not combined with other red flags.
Assessment
This skill appears coherent and implements an RSS aggregator as described. Before installing, consider: (1) network privacy — fetching feeds exposes your agent's IP to the feed hosts (use a proxy if you need privacy), (2) feed selection — the included lists contain many domains (you can edit scripts/lists.py to remove/add sources), (3) dependency — you must install feedparser (pip install --user feedparser), and (4) autonomous invocation — the skill can be invoked by the agent when relevant; if you want manual control, disable autonomous invocation in the agent settings. If you need deeper assurance, review the feeds in scripts/lists.py to confirm you are comfortable with every source.Like a lobster shell, security has layers — review code before you run it.
latestvk973k33gv4zscz8p1mk84x6qn9808q5s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.