Description

Daily digest of the Bitcoin Development mailing list and Bitcoin Core commits. Use when asked about recent bitcoin-dev discussions, mailing list activity, Bitcoin Core code changes, or to set up daily summaries. Fetches threads from groups.google.com/g/bitcoindev and commits from github.com/bitcoin/bitcoin.

README (SKILL.md)

Bitcoin Dev Digest (📰)

Name: Bitcoin Daily
Author: clawd21

Bitcoin Daily

Daily summary of bitcoindev mailing list + Bitcoin Core commits.

Made in 🤠 Texas ❤️ PlebLab

Commands

Run via: node ~/workspace/skills/bitcoin-daily/scripts/digest.js \x3Ccommand>

Command	Description
`digest [YYYY-MM-DD]`	Fetch & summarize (default: yesterday)
`archive`	List all archived digests
`read \x3CYYYY-MM-DD>`	Read a past summary

Output

The digest script fetches raw data. The agent then summarizes it for the user in this format:

Mailing list: Numbered list, each item with:

Bold title — 1-2 sentence ELI10 explanation with a touch of dry humor
Thread link

Commits: Bullet list of notable merges with PR links.

Keep summaries accessible — explain like the reader is smart but not a Bitcoin Core contributor. Dry humor welcome, not forced.

Daily Cron

Set up via Clawdbot cron to run every morning. The digest script fetches, archives, and outputs a summary that the agent then sends to the user.

Sources

Mailing list: https://groups.google.com/g/bitcoindev
Bitcoin Core: https://github.com/bitcoin/bitcoin/commits/master/

Usage Guidance

This skill appears to do what it says: fetch public mailing-list threads and GitHub commits, archive them under ~/workspace/bitcoin-dev-archive, and produce summaries. Things to consider before installing: (1) the script will create files in your HOME workspace—inspect and choose whether that path is acceptable; (2) it makes unauthenticated requests to the GitHub API (you may hit rate limits if used frequently); (3) it uses child_process.execSync to fetch Google Groups HTML (fragile but not inherently malicious); (4) since the skill can be run by the agent, review the included scripts yourself or run them in a sandbox if you have any doubts. No secrets are requested, and there are no external download URLs or hidden endpoints.

Capability Analysis

Type: OpenClaw Skill Name: bitcoin-daily Version: 1.3.2 The skill is classified as suspicious due to the use of `child_process.execSync` in `scripts/digest.js` to fetch web content. While currently used for a hardcoded, benign URL, this is a powerful primitive that could be exploited if the command string were ever influenced by untrusted input. Additionally, the `read` command in `scripts/digest.js` constructs a file path using a user-provided date string without explicit validation, creating a potential path traversal vulnerability that could allow reading arbitrary files outside the intended archive directory if the calling agent does not sanitize the input.

Capability Assessment

✓ Purpose & Capability

Name/description match the implementation: the script fetches bitcoindev threads and bitcoin/bitcoin commits, summarizes and archives them. No unrelated credentials, binaries, or services are requested.

✓ Instruction Scope

SKILL.md tells the agent to run the included node script to fetch, summarize, and archive data. The script only accesses public endpoints (groups.google.com, a gnusha.org mirror, and api.github.com), writes archive files to ~/workspace/bitcoin-dev-archive, and outputs a summary. The use of child_process.execSync to fetch Google Groups HTML is unusual but consistent with trying to retrieve page HTML; it does not read unrelated local files or transmit data to unexpected external endpoints.

✓ Install Mechanism

There is no install spec and no external downloads; the skill is instruction + an included script. Nothing is fetched from non-standard hosts during install.

✓ Credentials

The skill declares no required environment variables or credentials. The script uses process.env.HOME to build an archive path (normal). It makes unauthenticated GitHub API calls (rate-limited) but asks for no secrets.

✓ Persistence & Privilege

always is false and the skill does not request permanent platform presence or modify other skills. It writes only to its own archive directory under the user's HOME; this is expected for an archiving digest.

Version History

v1.3.2

Crisp 3x rendering, rounded corners, trimmed padding

v1.3.1

Fix marketing image link to use hosted URL

v1.3.0

Added marketing banner, 3 chat screenshots, and orange Bitcoin logo

v1.2.1

Added PlebLab credit

v1.2.0

ELI10 summaries with dry humor, cleaner output format instructions

v1.1.0

Add thread links and GitHub PR links to generated summaries

v1.0.0

Initial release: daily digest of bitcoindev mailing list + Bitcoin Core commits

Metadata

Slug bitcoin-daily

Version 1.3.2

License —

All-time Installs 5

Active Installs 5

Total Versions 7

Frequently Asked Questions

What is Bitcoin Daily?

Daily digest of the Bitcoin Development mailing list and Bitcoin Core commits. Use when asked about recent bitcoin-dev discussions, mailing list activity, Bitcoin Core code changes, or to set up daily summaries. Fetches threads from groups.google.com/g/bitcoindev and commits from github.com/bitcoin/bitcoin. It is an AI Agent Skill for Claude Code / OpenClaw, with 2581 downloads so far.

How do I install Bitcoin Daily?

Run "/install bitcoin-daily" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Bitcoin Daily free?

Yes, Bitcoin Daily is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Bitcoin Daily support?

Bitcoin Daily is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Bitcoin Daily?

It is built and maintained by clawd21 (@clawd21); the current version is v1.3.2.

More Skills