a skill for Chinese users access RSS subscription aggregation through the openclaw on cloud services, enabling them to view RSS feeds recommended by Andrej Karpathy.
Analysis
This appears to be a straightforward RSS setup guide, but it asks you to install remote software and another skill, so only run the commands if you trust those sources.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
sudo apt update sudo apt install golang-go ... go install github.com/odysseus0/feed/cmd/feed@latest
The skill instructs the user to run local shell commands that install system packages and a Go-based tool. This is disclosed and aligned with the RSS setup purpose, but it changes the user's environment.
export GOPROXY=https://goproxy.cn,direct # Install feed go install github.com/odysseus0/feed/cmd/feed@latest
The feed tool is installed from a remote GitHub module using the moving @latest version and a third-party Go proxy. This is expected for the setup, but the exact installed code can change over time.
The rss-digest skill must be installed separately
The skill depends on another OpenClaw skill for importing and aggregating feeds. This is purpose-aligned, but users should evaluate that separate skill independently.