Kaspa News
v1.1.0Kaspa News — let your Claw know everything about Kaspa in one place: latest news, core development updates, ecosystem launches, community talks, and weekly r...
⭐ 2· 581·0 current·0 all-time
by@atl4so
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided script and SKILL.md. The script only needs python3 and jq (both declared) and calls the kaspa.news public API endpoints described in the README. Required binaries and capabilities are proportionate to the task.
Instruction Scope
SKILL.md and FORMAT_LOCK.md tightly constrain how results must be presented (exact tweet text, emojis, linkification rules). This is unusual but consistent with the skill's goal of faithfully reproducing feed content. The instructions do not direct reading other local files, environment variables, or sending data to third parties beyond kaspa.news and known destination links (x.com, youtube, reddit) embedded in content.
Install Mechanism
There is no install spec (instruction-only) and only a bundled shell script. No downloads, package installs, or archive extraction are performed by the skill itself.
Credentials
The skill declares no required environment variables or credentials and its code does not attempt to read secrets. It performs outbound HTTP GETs to the single API host (https://kaspa.news/api) and parses JSON. The requirement for python3 with requests and jq is reasonable for the implementation.
Persistence & Privilege
always is false and the skill does not request persistent privileges or modify other skills or system-wide configuration. It runs as an on-demand CLI script and makes only expected network calls.
Assessment
This skill appears coherent and implements exactly what it claims: querying the public kaspa.news API and formatting results. Before installing, note: (1) the script requires python3 (with the requests module) and jq on PATH; (2) it will perform outbound HTTP requests to https://kaspa.news/api (ensure you trust that endpoint and your environment's network policy); (3) the skill enforces exact presentation rules (it will present full tweet text up to configured truncation and requires the agent to linkify handles/hashtags as specified) — if you need summarization, redaction, or to avoid showing certain content, you'll need to override or avoid using the skill; (4) no credentials are requested, but if you spot the API_BASE changed to an unexpected host later, treat that as a red flag. Overall the skill is internally consistent.Like a lobster shell, security has layers — review code before you run it.
latestvk9795jxncg84a390jpq4xcjg7181c4dg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3, jq
