ClawHub

Hacker News

v1.0.0

Browse and search Hacker News. Fetch top, new, best, Ask HN, Show HN stories and job postings. View item details, comments, and user profiles. Search stories and comments via Algolia. Find "Who is hiring?" threads. Use for any HN-related queries like "what's trending on HN?", "search HN for AI", "show comments on story X", "who is hiring?", "latest Ask HN posts".

⭐ 9· 3.5k·22 current·23 all-time
by@gchapim
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description match the included code and docs: the script fetches Hacker News lists, items, comments, users, and (per references) uses Algolia for search. One small inconsistency: registry metadata lists no required binaries, but the script clearly uses curl, jq and python3.
✓
Instruction Scope
SKILL.md tells the agent to run the provided scripts/hn.sh CLI and documents commands. The runtime instructions and the script stay within the stated purpose (fetching HN data from public APIs). There are no instructions to read unrelated files, exfiltrate secrets, or contact unexpected endpoints.
ℹ
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk at install time. The script will run local commands and temporary files (mktemp). Note: because there is no install step, callers must have curl, jq and python3 available — the registry metadata did not declare these dependencies.
✓
Credentials
The skill requires no environment variables or credentials and only contacts public Hacker News (Firebase) and Algolia endpoints. No sensitive env vars or unrelated service credentials are requested.
✓
Persistence & Privilege
The skill does not request persistent inclusion (always: false) and does not modify other skills or system-wide settings. It relies on executing the provided script when invoked.
Assessment
This skill appears to do what it says: a lightweight CLI that reads public Hacker News APIs and Algolia. Before installing or running it, ensure your environment has curl, jq and python3 available (the metadata omitted those). Review the script if you are uncomfortable executing code from an unknown source — it performs network calls to hacker-news.firebaseio.com and hn.algolia.com and writes temporary files under a tmpdir which it then removes. Because it runs shell commands, run in a restricted environment or sandbox if you want to limit risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ehv6qhvashq954b4a3ee64180c46a

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments