Botlearn Rss Manager 1.0.0
v1.0.0Aggregates, deduplicates, scores, clusters, and summarizes multiple RSS and Atom feeds into coherent, source-attributed daily digests with trend insights.
⭐ 0· 76·0 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name, description, SKILL.md, and knowledge/strategy documents are coherent and aligned: all instructions relate to RSS/Atom parsing, deduplication, scoring, clustering, and digest generation. Minor metadata inconsistencies exist (manifest.json/package.json version = 0.1.0 while skill metadata/versioning and published registry record show 1.0.0; ownerId differs between registry metadata and _meta.json). These are quality/integrity issues but do not change the functional alignment.
Instruction Scope
Runtime instructions are narrowly scoped to feed ingestion, conditional HTTP requests, XML/HTML parsing, content normalization, deduplication, scoring, clustering, and digest assembly. The skill explicitly instructs the agent to fetch feeds and (as a fallback) to fetch linked article URLs; this external network access is expected for the stated purpose. The instructions do not ask the agent to read system files, secrets, or unrelated environment variables.
Install Mechanism
No install spec and no code files that would be written/executed on install — the skill is instruction-only and relies on agent runtime capabilities. This is the lowest-risk install posture.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate to a public-feed aggregator. Note: it will not be able to access private or authenticated feeds unless the user supplies appropriate credentials (which the skill currently does not declare or request).
Persistence & Privilege
Flags are default (always: false). The skill describes storing per-feed state (ETag/Last-Modified and health metrics) which is normal and appropriate for polling. It does not request permanent platform-wide privileges or modifications to other skills.
Assessment
This skill appears to be what it claims: an instruction-only RSS/Atom aggregator and digest generator that will make HTTP requests to feeds and (when needed) to linked article pages. Before installing or enabling it, consider: (1) Network & privacy: it will fetch arbitrary external URLs (feeds and fallback article pages) — do not add private, sensitive, or paywalled feed URLs unless you understand where credentials would be stored and how they're protected. (2) No credentials requested: the skill does not request API keys or secrets, so it cannot access private feeds without extra configuration. (3) Data storage: the strategy describes storing ETag/Last-Modified, feed health metrics, and article records — confirm where the agent stores this data and retention/visibility settings. (4) Metadata inconsistencies: repository/package metadata versions and ownerId differ in places; treat this as a provenance/quality signal and, if source provenance is important to you, verify the upstream repository or publisher. (5) Test first with a small set of public feeds to confirm behavior, polling frequency, and digest format before subscribing many feeds or enabling automated scheduling.Like a lobster shell, security has layers — review code before you run it.
latestvk9763yazv8x0phvcr9gq6qr3dx83grh5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.