Feed Digest
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to be a straightforward RSS/feed digest helper, with disclosed use of a third-party feed CLI and a read-status update command.
This looks safe for its intended purpose, but install the feed CLI only from a source you trust and be aware that the workflow may mark feed items as read.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill requires trusting the external feed CLI package and its future latest version if installed via Go.
The skill relies on a third-party CLI that is not included in the artifact set, and the Go install uses @latest rather than a pinned version. This is expected for a CLI-based feed skill but is still worth verifying before installation.
brew | formula: odysseus0/tap/feed ... go | package: github.com/odysseus0/feed/cmd/feed@latest
Verify the feed CLI source before installing, and prefer a pinned or reviewed version if possible.
Posts may be marked as read after the digest, which could affect what appears as unread later.
The documented workflow includes a state-changing command that marks feed entries as read. This fits the digest workflow but changes the user's feed database.
Mark read — `feed update entries --read <id1> <id2> ...` to mark triaged entries as read.
Ask the agent not to mark entries as read if you want to keep unread status unchanged, or review the selected entry IDs before allowing that step.