MorningAI

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 14, 2026, 9:19 AM
• Findings: 0
• Version: 1.2.5

Overview

The skill's code, runtime instructions, and requested environment access are internally consistent with a daily AI-news collector and reporter; nothing requested appears unrelated to that purpose.

This skill appears to do what it says: collect public AI-related posts, score/deduplicate them, and write reports/images locally. Before installing: (1) Review the Python scripts (skills/tracking-list/scripts/collect.py and lib/*) if you want to audit outbound calls. (2) Prefer creating the ~/.config/morning-ai/.env file yourself (do not paste secrets into an agent chat); if you use a GITHUB_TOKEN or image-provider key, give it least privilege and rotate/delete when not needed. (3) If you run unattended scheduled jobs, consider isolating the run environment (dedicated user account or container) because reports and keys are stored on disk in plaintext. (4) If you want extra assurance, run a test with only free/public sources (create the minimal config shown in SKILL.md) before enabling optional API keys or image generation.