← Back to Skills Marketplace
Last 30 Days
by
johnsonDevops
· GitHub ↗
· v1.0.0
6720
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install last30days-skill
Description
Research any topic across Reddit, X, YouTube, and the web from the last 30 days. Returns synthesized expert answers and copy-paste prompts.
Usage Guidance
Install only if you are comfortable with the skill reading X browser session cookies and writing research topics/results to local files. Prefer explicit API-key or manually supplied-token modes, audit or pin the missing cookie dependency before enabling X cookie auth, and avoid sensitive topics on shared machines until output permissions and temp-file handling are fixed.
Capability Analysis
Type: OpenClaw Skill
Name: last30days-skill
Version: 1.0.0
The skill is classified as suspicious due to several high-risk capabilities and vulnerabilities, despite its stated benign purpose. The most critical concern is a potential shell injection vulnerability in `SKILL.md` where user-controlled `$ARGUMENTS` are passed directly to a `bash` command executing `scripts/last30days.py`. While the Python script itself uses `argparse` to mitigate direct injection within Python, the initial `bash` execution is vulnerable if the OpenClaw agent does not sanitize `$ARGUMENTS`. Additionally, the vendored Node.js module (`scripts/lib/vendor/bird-search/`) accesses browser cookies for X.com authentication and dynamically fetches/executes JavaScript from X.com to update API endpoints, posing a supply chain vulnerability if X.com were compromised. The broad `Bash` and `Write` tool permissions in `SKILL.md` further amplify these risks.
Capability Assessment
Credentials
Network calls to listed providers are expected for the research purpose, but default browser-cookie access, Keychain/browser profile prompts, yt-dlp execution, and local output of raw provider responses are substantial and should be explicitly scoped before use.
Install Mechanism
The README uses a normal clone-and-config setup, but the vendored X client imports @steipete/sweet-cookie without declaring or pinning it in package metadata or including a lockfile, so a sensitive cookie-reading component may resolve from outside the reviewed artifact.
Instruction Scope
The active skill is mostly scoped to research and synthesis, but its security text says it cannot be invoked autonomously while Codex metadata allows implicit invocation, and the bundled open variant asks the agent to update persistent context after interactions.
Persistence & Privilege
Normal runs write reports and raw responses under ~/.local/share/last30days/out, caches are written under user config/cache paths, and SQLite persistence is available for watchlists; some of this is disclosed, but normal report/raw-output persistence and temporary-directory fallback are not clearly described in the skill's security summary.
Purpose & Capability
The core purpose of recent-topic research across Reddit, X, YouTube, and web sources is coherent, but the X path uses authenticated browser session cookies and a cookie-reading JavaScript dependency, which is higher-impact than ordinary public research.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install last30days-skill - After installation, invoke the skill by name or use
/last30days-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
last30days-skill v1.0.0 — Initial Release
- Enables research on any topic discussed in the last 30 days across Reddit, X, YouTube, and the web.
- Automatically parses user intent to identify topic, target tool, and research type before any research begins.
- Transparently displays parsed user intent to confirm understanding before running research scripts.
- Performs a comprehensive foreground research script combining recent Reddit/X/YouTube data, followed by focused WebSearch.
- Synthesizes findings to deliver actionable, copy-paste-ready prompts or insights, grounded in up-to-date, real-world discussions.
Metadata
Frequently Asked Questions
What is Last 30 Days?
Research any topic across Reddit, X, YouTube, and the web from the last 30 days. Returns synthesized expert answers and copy-paste prompts. It is an AI Agent Skill for Claude Code / OpenClaw, with 6720 downloads so far.
How do I install Last 30 Days?
Run "/install last30days-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Last 30 Days free?
Yes, Last 30 Days is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Last 30 Days support?
Last 30 Days is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Last 30 Days?
It is built and maintained by johnsonDevops (@johnsondevops); the current version is v1.0.0.
More Skills