Dinstein Tech News Digest

Generate tech news digests with unified source model, quality scoring, and multi-format output. Six-source data collection from RSS feeds, Twitter/X KOLs, Gi...

This skill appears to do what it says: fetch and merge tech news and produce templates for Discord/email/PDF. Before installing or running: - Only set API keys you actually need (Twitter, Brave/Tavily, GitHub). All such env vars are optional; if you don't provide them the pipeline will run with reduced capability. - If you plan to enable GitHub App token generation, review and protect the GH_APP_KEY_FILE (private key PEM); the code invokes openssl (declared optional) to sign JWTs. Provide the PEM only if you understand and trust that use. - The repo suggests pip dependencies (requirements.txt) but there is no automated installer — install Python deps in a controlled environment (venv/container) before running. - The pipeline reads your workspace archive (<workspace>/archive/tech-news-digest/) to deduplicate previous digests — ensure sensitive content isn't stored there if you don't want it read. - If you will use the email delivery options (msmtp/mail or gog), verify those CLIs are configured locally (they rely on local mail client configuration) and inspect scripts/send-email.py to confirm behavior and destination handling. - Note minor doc drift: README/CHANGELOG mention GETX_API_KEY but SKILL.md's env list omits it; be cautious if you plan to use that backend and check the latest code for the exact env var name. Recommendation: run the pipeline in an isolated environment (virtualenv or container), review send-email.py and any delivery-related config, and only provide secrets for services you actually intend to use.

Type: OpenClaw Skill Name: xiaoding-dinstein-tech-news-digest Version: 3.15.0 The skill bundle is a well-structured tech news aggregation system that fetches data from RSS, Twitter, GitHub, Reddit, and Web Search APIs. While it possesses significant capabilities including network access, file I/O, and subprocess execution (scripts/run-pipeline.py and scripts/fetch-github.py), these are strictly aligned with its stated purpose. The code demonstrates security awareness through the implementation of HTML sanitization (scripts/sanitize-html.py), URL scheme validation (http/https only), and safe subprocess handling. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.