功能描述

Daily digest of the Bitcoin Development mailing list and Bitcoin Core commits. Use when asked about recent bitcoin-dev discussions, mailing list activity, Bitcoin Core code changes, or to set up daily summaries. Fetches threads from groups.google.com/g/bitcoindev and commits from github.com/bitcoin/bitcoin.

使用说明 (SKILL.md)

Bitcoin Dev Digest (📰)

Name: Bitcoin Daily
Author: clawd21

Bitcoin Daily

Daily summary of bitcoindev mailing list + Bitcoin Core commits.

Made in 🤠 Texas ❤️ PlebLab

Commands

Run via: node ~/workspace/skills/bitcoin-daily/scripts/digest.js \x3Ccommand>

Command	Description
`digest [YYYY-MM-DD]`	Fetch & summarize (default: yesterday)
`archive`	List all archived digests
`read \x3CYYYY-MM-DD>`	Read a past summary

Output

The digest script fetches raw data. The agent then summarizes it for the user in this format:

Mailing list: Numbered list, each item with:

Bold title — 1-2 sentence ELI10 explanation with a touch of dry humor
Thread link

Commits: Bullet list of notable merges with PR links.

Keep summaries accessible — explain like the reader is smart but not a Bitcoin Core contributor. Dry humor welcome, not forced.

Daily Cron

Set up via Clawdbot cron to run every morning. The digest script fetches, archives, and outputs a summary that the agent then sends to the user.

Sources

Mailing list: https://groups.google.com/g/bitcoindev
Bitcoin Core: https://github.com/bitcoin/bitcoin/commits/master/

安全使用建议

This skill appears to do what it says: fetch public mailing-list threads and GitHub commits, archive them under ~/workspace/bitcoin-dev-archive, and produce summaries. Things to consider before installing: (1) the script will create files in your HOME workspace—inspect and choose whether that path is acceptable; (2) it makes unauthenticated requests to the GitHub API (you may hit rate limits if used frequently); (3) it uses child_process.execSync to fetch Google Groups HTML (fragile but not inherently malicious); (4) since the skill can be run by the agent, review the included scripts yourself or run them in a sandbox if you have any doubts. No secrets are requested, and there are no external download URLs or hidden endpoints.

功能分析

Type: OpenClaw Skill Name: bitcoin-daily Version: 1.3.2 The skill is classified as suspicious due to the use of `child_process.execSync` in `scripts/digest.js` to fetch web content. While currently used for a hardcoded, benign URL, this is a powerful primitive that could be exploited if the command string were ever influenced by untrusted input. Additionally, the `read` command in `scripts/digest.js` constructs a file path using a user-provided date string without explicit validation, creating a potential path traversal vulnerability that could allow reading arbitrary files outside the intended archive directory if the calling agent does not sanitize the input.

能力评估

✓ Purpose & Capability

Name/description match the implementation: the script fetches bitcoindev threads and bitcoin/bitcoin commits, summarizes and archives them. No unrelated credentials, binaries, or services are requested.

✓ Instruction Scope

SKILL.md tells the agent to run the included node script to fetch, summarize, and archive data. The script only accesses public endpoints (groups.google.com, a gnusha.org mirror, and api.github.com), writes archive files to ~/workspace/bitcoin-dev-archive, and outputs a summary. The use of child_process.execSync to fetch Google Groups HTML is unusual but consistent with trying to retrieve page HTML; it does not read unrelated local files or transmit data to unexpected external endpoints.

✓ Install Mechanism

There is no install spec and no external downloads; the skill is instruction + an included script. Nothing is fetched from non-standard hosts during install.

✓ Credentials

The skill declares no required environment variables or credentials. The script uses process.env.HOME to build an archive path (normal). It makes unauthenticated GitHub API calls (rate-limited) but asks for no secrets.

✓ Persistence & Privilege

always is false and the skill does not request permanent platform presence or modify other skills. It writes only to its own archive directory under the user's HOME; this is expected for an archiving digest.

版本历史

v1.3.2

Crisp 3x rendering, rounded corners, trimmed padding

v1.3.1

Fix marketing image link to use hosted URL

v1.3.0

Added marketing banner, 3 chat screenshots, and orange Bitcoin logo

v1.2.1

Added PlebLab credit

v1.2.0

ELI10 summaries with dry humor, cleaner output format instructions

v1.1.0

Add thread links and GitHub PR links to generated summaries

v1.0.0

Initial release: daily digest of bitcoindev mailing list + Bitcoin Core commits

元数据

Slug bitcoin-daily

版本 1.3.2

许可证 —

累计安装 5

当前安装数 5

历史版本数 7

常见问题

Bitcoin Daily 是什么？

Daily digest of the Bitcoin Development mailing list and Bitcoin Core commits. Use when asked about recent bitcoin-dev discussions, mailing list activity, Bitcoin Core code changes, or to set up daily summaries. Fetches threads from groups.google.com/g/bitcoindev and commits from github.com/bitcoin/bitcoin. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2581 次。

如何安装 Bitcoin Daily？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install bitcoin-daily」即可一键安装，无需额外配置。

Bitcoin Daily 是免费的吗？

是的，Bitcoin Daily 完全免费（开源免费），可自由下载、安装和使用。

Bitcoin Daily 支持哪些平台？

Bitcoin Daily 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Bitcoin Daily？

由 clawd21（@clawd21）开发并维护，当前版本 v1.3.2。