← 返回 Skills 市场
mvanhorn

last30days

作者 Matt Van Horn · GitHub ↗ · v3.0.0-open · MIT-0
cross-platform ⚠ suspicious
9434
总下载
20
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install last30days-official
功能描述
Research any topic across Reddit, X, YouTube, TikTok, Instagram, Hacker News, Polymarket, GitHub, Perplexity, and more. AI agent scores by upvotes, likes, and real money. Also triggered by 'last30'.
安全使用建议
This skill includes substantial runnable code and persistent storage but the registry metadata (no required env vars or binaries; no install) does not reflect that. Before installing or providing credentials: 1) Inspect and run the built-in diagnostic: python3 <skill_root>/scripts/last30days.py --diagnose to see which sources require keys and which binaries are missing. 2) Do NOT paste account tokens (AUTH_TOKEN/CT0 or others) unless you understand the risk — X tokens can grant access to your account data. Prefer read-only or scoped keys where possible. 3) If you want to try safely, run the scripts in an isolated environment (container or throwaway VM) and avoid writing secrets to ~/.config until satisfied. 4) Verify required binaries (node, yt-dlp) are acceptable to install on your system — node is required to run the vendored bird-search module. 5) Be cautious about enabling cron/automatic runs or running the setup/device-auth flows; those will persist configuration and may schedule recurring networked activity. 6) If you plan to use the skill, consider limiting credential scope, reviewing the vendored JS (bird-search.mjs), and confirming which backend (ScrapeCreators vs OpenAI/Perplexity/OpenRouter) the current variant actually uses (there are conflicting references).
功能分析
Type: OpenClaw Skill Name: last30days-official Version: 3.0.0-open The skill is a comprehensive research and monitoring tool that aggregates data from multiple social media platforms (Reddit, X, YouTube, TikTok, Instagram) and web sources. It features a sophisticated orchestration pipeline including intelligent pre-research (auto-resolution of handles/subreddits), a SQLite-backed knowledge accumulator with full-text search, and a 'fun judge' LLM-scoring mechanism. While the skill utilizes high-privilege tools like Bash for dependency management (installing yt-dlp via Homebrew) and allows the agent to modify its own configuration file (~/.config/last30days/.env) for user-requested toggles like ELI5 mode, these behaviors are transparently documented and strictly aligned with the stated purpose. The code includes security best practices such as checking file permissions on secrets files (lib/env.py) and using structured subprocess calls rather than raw shell execution. No evidence of malicious intent, unauthorized data exfiltration, or obfuscation was found.
能力评估
ℹ Purpose & Capability
The name/description (research social/web sources, watchlist, briefings) matches the included code and references. The code contains connectors for Reddit, X, YouTube, TikTok, Instagram, Hacker News, GitHub, Perplexity, Polymarket and supports watchlists/SQLite persistence, which is coherent with the stated purpose. However, there are small inconsistencies across docs (e.g., changelog references SCRAPECREATORS_API_KEY as a primary env while SKILL.md lists OPENAI_API_KEY for Reddit), which look like versioning/maintenance drift.
⚠ Instruction Scope
SKILL.md instructs the agent to locate the skill folder, read/write multiple files, run the included Python CLI scripts, persist data to ~/.local/share/last30days/research.db and ~/.local/share/last30days/briefs, save reports to ~/Documents/Last30Days, and optionally run setup/device-auth flows. It also instructs always using --auto-resolve and running long-running networked searches. The skill will read and write user files and may perform network requests; these behaviors are broader than the skill's declared metadata (which lists no env vars or binaries).
⚠ Install Mechanism
Registry metadata shows no install spec and 'required binaries: none', but the shipped code expects Node.js (vendored bird-search .mjs executed via node) and mentions yt-dlp for YouTube. The package vendors JS code and launches subprocesses (node, possibly yt-dlp). This disparity (no declared binary requirements yet requiring node/yt-dlp) is an incoherence and increases risk because the runtime will spawn subprocesses with environment injection.
⚠ Credentials
The registry claims no required environment variables or credentials, but SKILL.md and code clearly expect multiple API keys and tokens (OPENAI_API_KEY, XAI_API_KEY, OPENROUTER_API_KEY, PARALLEL_API_KEY, BRAVE_API_KEY, SCRAPECREATORS_API_KEY, and X auth tokens AUTH_TOKEN/CT0). The skill also reads/writes a local ~/.config/last30days/.env and can inject those values into subprocesses. Requiring platform account tokens (especially AUTH_TOKEN/CT0 for X) and multiple LLM/web-search keys is broad and not declared — the requested secrets are disproportionate to the metadata and warrant caution.
⚠ Persistence & Privilege
The skill persists data to a local SQLite DB (~/.local/share/last30days/research.db), writes briefing JSON to ~/.local/share/last30days/briefs and Markdown to ~/Documents/Last30Days, and offers watchlist automation instructions (cron/launchd). It also contains a setup wizard that can write config and device-auth info. Persisting research, tokens, and saved outputs is functional for the feature but is a material persistence/privilege increase compared to the declared empty requirements and should be considered before granting credentials or enabling scheduled runs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install last30days-official
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /last30days-official 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.0.0-open
last30days v3.0.0-open: Major update with multi-mode research, persistent knowledge, and watchlist features. - Added support for multiple modes: one-shot research, watchlist management, daily briefing, and query of accumulated knowledge. - Introduced persistent storage: SQLite research database and saved briefings. - Expanded sources: now includes Reddit, X, YouTube, TikTok, Instagram, Hacker News, Polymarket, GitHub, Perplexity, and more. - Modular command routing via first argument (e.g. `watch`, `briefing`, `history`, or direct research topic). - Improved API key handling and source availability checks. - Reference-driven flow: each mode uses dedicated instructions, improving reliability and flexibility.
v2.9.3
Security scan improvements: declared AUTH_TOKEN/CT0 in optionalEnv, clarified X token access language (no browser session access), added permissions overview block, removed prompt-injection false positive
v2.9.1
Initial ClawHub release. v2.9.1: auto-save to ~/Documents/Last30Days/, ScrapeCreators Reddit backend, smart subreddit discovery, top comment elevation, Instagram Reels (8th source), TikTok, Polymarket, HN, X, YouTube.
元数据
Slug last30days-official
版本 3.0.0-open
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

last30days 是什么?

Research any topic across Reddit, X, YouTube, TikTok, Instagram, Hacker News, Polymarket, GitHub, Perplexity, and more. AI agent scores by upvotes, likes, and real money. Also triggered by 'last30'. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 9434 次。

如何安装 last30days?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install last30days-official」即可一键安装,无需额外配置。

last30days 是免费的吗?

是的,last30days 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

last30days 支持哪些平台?

last30days 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 last30days?

由 Matt Van Horn(@mvanhorn)开发并维护,当前版本 v3.0.0-open。

💬 留言讨论