Bundle Pluginsource linked

holo RSS Readerv1.1.2

RSS/Atom feed reader and daily digest skill with Gist OPML import, full-article caching, and WeChat Official Accounts bridging.

holo-rss-reader·runtime holo-rss-reader·by @helebest
openclaw bundles install clawhub:holo-rss-reader
Latest release: v1.1.2Download zip

Capabilities

Bundle format
openclaw
Host targets
openclaw
Runtime ID
holo-rss-reader

Compatibility

Built With Open Claw Version
2026.3.24-beta.2
Plugin Api Range
>=2026.3.24-beta.2
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The implemented capabilities—fetching RSS/Atom feeds, importing OPML from GitHub Gists, using wechat2rss, generating digests, and caching article text—match the stated purpose. There are no unrelated cloud credentials, tokens, or services requested. One packaging mismatch is that the registry says no required binaries, while the instructions and scripts clearly rely on bash, Python 3.11+, and Python packages.
Instruction Scope
The SKILL.md instructions stay within the RSS/news-reader domain and direct the agent to run the included rss.sh commands. Expected network destinations include GitHub/Gist, wechat2rss, and user/feed-provided URLs. The `full <article-url>` feature can fetch article pages, which is coherent with full-article caching but should not be treated as a general-purpose web scraper. The HTTP client also contains a direct retry path if a proxy-backed request receives HTTP 429, which is worth knowing if the user expects all requests to remain behind a proxy.
Install Mechanism
There is no install spec, so the skill does not automatically download or extract external code during installation. However, it is not purely prose-only: it ships runnable JavaScript, Python, and shell files. The skill documentation suggests running `uv sync` if dependencies are missing, but dependency installation is not represented as an OpenClaw install requirement.
Credentials
No credentials or API keys are required, which is appropriate for an RSS reader. The documentation and code use optional non-secret environment variables such as `RSS_DATA_DIR`, `RSS_CONFIG`, and `RSS_PYTHON`, but these are not declared in the registry metadata. The HTTP client also checks standard proxy environment variables; this is common for network tools, but users should be aware of the direct retry behavior.
Persistence & Privilege
`always` is false, and there is no request for broad agent persistence or privileged config paths. The skill writes RSS state, feed lists, digests, and article caches under its configured data directory, which is consistent with its purpose.
Assessment
This skill looks internally consistent with an RSS reader. Before installing, understand that it will make network requests to GitHub/Gist, wechat2rss, and any feed/article URLs in your subscriptions, and it will cache content locally under `~/data/rss` by default. If you use a proxy for privacy, review the direct retry behavior. If you want to reduce SSRF-style risk from untrusted OPML/feed sources, configure the skill's restricted or allowlist security mode.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
d78e1d73a3d1
Tag
codex/openclaw-extension-entry
Provenance
No
Scan status
clean

Tags

latest
1.1.2