trump_news

This skill is largely coherent with its stated purpose, but pay attention to optional credential and push integrations before enabling it: - The skill can optionally fetch Truth Social posts via truthbrush if you install that library and set TRUTHSOCIAL_USERNAME/TRUTHSOCIAL_PASSWORD or TRUTHSOCIAL_TOKEN. Those env vars are not listed in the manifest; only provide them if you trust the environment and understand how you obtained the token (do not paste sensitive browser tokens into unknown places). - SKILL.md suggests calling a separate send_telegram.py (not included). If you enable automatic pushes, inspect any send_telegram.py script on the same host (or other skills that provide it) to confirm where it sends messages and what credentials it uses. That external script, not this skill, controls outbound delivery. - The scripts make network requests only to public RSS feeds and the Federal Register API (and truthbrush when configured). If you want a conservative setup, run the fetch script manually first to see its stdout, or run it in an isolated environment before enabling cron/automatic runs. - If you require stricter guarantees, ask the skill author to declare optional env vars in the manifest (TRUTHSOCIAL_*) and to avoid recommending cross-skill send_telegram invocation without explicit configuration instructions.