Rss Digest
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: rss-digest Version: 0.2.1 The skill bundle is benign. It provides clear instructions for an AI agent to perform RSS feed digestion using the `feed` CLI tool. All commands and network calls (installing `feed`, importing a starter OPML file from GitHub, and fetching content from RSS entry URLs) are directly aligned with the stated purpose and do not show any signs of data exfiltration, malicious execution, persistence, or prompt injection attempts to subvert the agent's security or intent. The external dependencies and URLs are consistent with the tool's origin.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill requires trusting the external `feed` command that will read and manage the local RSS feed database.
The skill depends on an external CLI installed from a custom tap or an unpinned Go package. This is disclosed and central to the skill, but users should trust the package source.
brew | formula: odysseus0/tap/feed ... go | package: github.com/odysseus0/feed/cmd/feed@latest
Review the `feed` project or install it from a trusted, pinned source if possible.
If your feed database is empty, the skill may add a starter set of RSS feeds before creating a digest.
The workflow tells the agent to import a remote starter feed list when no feeds are configured, which persistently changes the user's feed subscriptions.
if 0 feeds, import starter set: `feed import https://github.com/odysseus0/feed/raw/main/hn-popular-blogs-2025.opml` and retry.
If you do not want starter feeds added automatically, tell the agent to ask before importing or to skip the import step.