Skip to main content

last30days

Synthesizes recent discussions from multiple social media platforms into comprehensive, cited reports for informed decision-making.

Install this skill

or
0/100

Security score

The last30days skill was audited on May 12, 2026 and we found 41 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 67

Template literal with variable interpolation in command context

SourceSKILL.md
67```bash
medium line 247

Template literal with variable interpolation in command context

SourceSKILL.md
247```bash
medium line 585

Template literal with variable interpolation in command context

SourceSKILL.md
585```bash
medium line 871

Template literal with variable interpolation in command context

SourceSKILL.md
871```bash
medium line 75

Access to hidden dotfiles in home directory

SourceSKILL.md
75**Why:** `~/.claude/plugins/marketplaces/last30days-skill/` is a git clone Claude Code auto-restores to `origin/main` on session start. It can lag the versioned cache by one or more releases. Three 20
medium line 87

Access to hidden dotfiles in home directory

SourceSKILL.md
87**Named failure mode (2026-04-18 public v3.0.6 0/8 regression):** on 8 consecutive public invocations, Opus 4.7 treated `/last30days` as a generic research keyword and improvised. Every single run vio
medium line 91

Access to hidden dotfiles in home directory

SourceSKILL.md
912. **The pinned SKILL_ROOT resolution** in the engine Bash calls always points to the public plugin cache, never `~/.openclaw/` or other stale copies.
medium line 272

Access to hidden dotfiles in home directory

SourceSKILL.md
272- If `~/.config/last30days/.env` does NOT exist, this is a first run.
medium line 278

Access to hidden dotfiles in home directory

SourceSKILL.md
278- After the wizard writes `SETUP_COMPLETE=true` to `~/.config/last30days/.env`, proceed to research.
medium line 1553

Access to hidden dotfiles in home directory

SourceSKILL.md
1553- If they say **"more fun"**, **"too serious"**, or similar → Write `FUN_LEVEL=high` to `~/.config/last30days/.env` (append, don't overwrite). Confirm: "Fun level set to high. Next run will surface mo
medium line 1554

Access to hidden dotfiles in home directory

SourceSKILL.md
1554- If they say **"less fun"**, **"too many jokes"**, or similar → Write `FUN_LEVEL=low` to `~/.config/last30days/.env`. Confirm: "Fun level set to low. Next run will focus on the news."
medium line 1555

Access to hidden dotfiles in home directory

SourceSKILL.md
1555- If they say **"eli5 on"**, **"eli5 mode"**, **"explain simpler"**, or similar → Write `ELI5_MODE=true` to `~/.config/last30days/.env`. Confirm: "ELI5 mode on. All future runs will explain things lik
medium line 1556

Access to hidden dotfiles in home directory

SourceSKILL.md
1556- If they say **"eli5 off"**, **"normal mode"**, **"full detail"**, or similar → Write `ELI5_MODE=false` to `~/.config/last30days/.env`. Confirm: "ELI5 mode off. Back to full detail."
medium line 272

Access to .env file

SourceSKILL.md
272- If `~/.config/last30days/.env` does NOT exist, this is a first run.
medium line 278

Access to .env file

SourceSKILL.md
278- After the wizard writes `SETUP_COMPLETE=true` to `~/.config/last30days/.env`, proceed to research.
medium line 317

Access to .env file

SourceSKILL.md
317**Confirm the topic with a branded, truthful message. Build ACTIVE_SOURCES_LIST by checking what's configured in .env:**
medium line 1412

Access to .env file

SourceSKILL.md
1412- "Scan my browser cookies (free)" - Get consent, run cookie scan, write BROWSER_CONSENT=true + FROM_BROWSER=auto to .env
medium line 1413

Access to .env file

SourceSKILL.md
1413- "I have an xAI API key" - Ask them to paste it, write XAI_API_KEY to .env
medium line 1553

Access to .env file

SourceSKILL.md
1553- If they say **"more fun"**, **"too serious"**, or similar → Write `FUN_LEVEL=high` to `~/.config/last30days/.env` (append, don't overwrite). Confirm: "Fun level set to high. Next run will surface mo
medium line 1554

Access to .env file

SourceSKILL.md
1554- If they say **"less fun"**, **"too many jokes"**, or similar → Write `FUN_LEVEL=low` to `~/.config/last30days/.env`. Confirm: "Fun level set to low. Next run will focus on the news."
medium line 1555

Access to .env file

SourceSKILL.md
1555- If they say **"eli5 on"**, **"eli5 mode"**, **"explain simpler"**, or similar → Write `ELI5_MODE=true` to `~/.config/last30days/.env`. Confirm: "ELI5 mode on. All future runs will explain things lik
medium line 1556

Access to .env file

SourceSKILL.md
1556- If they say **"eli5 off"**, **"normal mode"**, **"full detail"**, or similar → Write `ELI5_MODE=false` to `~/.config/last30days/.env`. Confirm: "ELI5 mode off. Back to full detail."
low line 192

External URL reference

SourceSKILL.md
192**BAD (raw URL):** `per https://www.rollingstone.com/music/music-news/kanye-west-bully-1235506094/`
low line 195

External URL reference

SourceSKILL.md
195**GOOD:** `per [Rolling Stone](https://www.rollingstone.com/music/music-news/kanye-west-bully-1235506094/)`, `per [@honest30bgfan_](https://x.com/honest30bgfan_)`, `[r/hiphopheads](https://reddit.com/
low line 1351

External URL reference

SourceSKILL.md
13511. @handles from X - `per [@handle](https://x.com/handle)` (these prove the tool's unique value)
low line 1352

External URL reference

SourceSKILL.md
13522. r/subreddits from Reddit - `per [r/subreddit](https://reddit.com/r/subreddit)` (when citing Reddit, YouTube, or TikTok, prefer quoting top comments over just the thread title)
low line 1353

External URL reference

SourceSKILL.md
13533. YouTube channels - `per [channel name](https://youtube.com/@channel) on YouTube` (transcript-backed insights)
low line 1354

External URL reference

SourceSKILL.md
13544. TikTok creators - `per [@creator](https://tiktok.com/@creator) on TikTok` (viral/trending signal)
low line 1355

External URL reference

SourceSKILL.md
13555. Instagram creators - `per [@creator](https://instagram.com/creator) on Instagram` (influencer/creator signal)
low line 1356

External URL reference

SourceSKILL.md
13566. HN discussions - `per [HN](https://news.ycombinator.com/item?id=N)` or `per [hn/username](https://news.ycombinator.com/user?id=username)` (developer community signal)
low line 1357

External URL reference

SourceSKILL.md
13577. Polymarket - `[Polymarket](https://polymarket.com/event/...) has X at Y% (up/down Z%)` with specific odds and movement
low line 1358

External URL reference

SourceSKILL.md
13588. Web sources - ONLY when Reddit/X/YouTube/TikTok/Instagram/HN/Polymarket don't cover that specific fact; link the publication: `per [Rolling Stone](https://rollingstone.com/...)`
low line 1366

External URL reference

SourceSKILL.md
1366**GOOD:** "His album BULLY drops March 20 - fans on X are split on the tracklist, per [@honest30bgfan_](https://x.com/honest30bgfan_)"
low line 1367

External URL reference

SourceSKILL.md
1367**GOOD:** "Ye's apology got massive traction on [r/hiphopheads](https://reddit.com/r/hiphopheads)"
low line 1368

External URL reference

SourceSKILL.md
1368**OK** (web, only when Reddit/X don't have it): "The Hellwatt Festival runs July 4-18 at RCF Arena, per [Billboard](https://www.billboard.com/music/music-news/hellwatt-festival-2026-lineup-...)"
low line 1387

External URL reference

SourceSKILL.md
1387**{Headline summarizing topic 1}** - [1-2 sentences about what people are saying, per [@handle](https://x.com/handle) or [r/sub](https://reddit.com/r/sub)]
low line 1389

External URL reference

SourceSKILL.md
1389**{Headline summarizing topic 2}** - [1-2 sentences, per [@handle](https://x.com/handle) or [r/sub](https://reddit.com/r/sub)]
low line 1391

External URL reference

SourceSKILL.md
1391**{Headline summarizing topic 3}** - [1-2 sentences, per [@handle](https://x.com/handle) or [r/sub](https://reddit.com/r/sub)]
low line 1394

External URL reference

SourceSKILL.md
13941. [Pattern] - per [@handle](https://x.com/handle)
low line 1395

External URL reference

SourceSKILL.md
13952. [Pattern] - per [r/sub](https://reddit.com/r/sub)
low line 1396

External URL reference

SourceSKILL.md
13963. [Pattern] - per [@handle](https://x.com/handle)
Scanned on May 12, 2026
View Security Dashboard