last30days

Malicious tool definition detected

The test isolation bug would ship a flaky test to everyone who sets `OPENAI_API_KEY` **Cherry-pick vs close approach:** Since the Codex auth code is already on main, cherry-picking would be redundant.

Data Exfiltration

Supply Chain Compromise

Risky tool definition detected

""" all_items = [] core_topic = _extract_core_subject(topic) if topic else None for handle in handles: handle = handle.lstrip("@") if core_topic: query = f"from:{handle} {core_topic} since:{from_date}" else: query = f"from:{handle} since:{from_date}" cmd = [ "node", str(_BIRD_SEARCH_MJS), query, "--count", str(count_per), "--json", ] preexec = os.setsid if hasattr(os, 'setsid') else None try: proc = subprocess.Popen( cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, preexec_fn=pree

Tool passed security scan

Resource Abuse

Data Exfiltration

Supply Chain Compromise

Shadow Persistence

Data Exfiltration

Supply Chain Compromise

Data Exfiltration

Data Exfiltration

Resource Abuse

Supply Chain Compromise

Risky tool definition detected

Tool: last30days/scripts/sync.sh Description: #!/usr/bin/env bash # sync.sh - Deploy last30days skill to all host locations # Usage: bash scripts/sync.sh (run from repo root) set -euo pipefail SRC="$(cd "$(dirname "$0")/.." && pwd)" echo "Source: $SRC" TARGETS=( "$HOME/.claude/skills/last30days" "$HOME/.agents/skills/last30days" "$HOME/.codex/skills/last30days" ) for t in "${TARGETS[@]}"; do echo "" echo "--- Syncing to $t ---" mkdir -p "$t/scripts/lib" cp "$SRC/SKILL.md" "$t/" # Main script +

Data Exfiltration

Shadow Persistence

Supply Chain Compromise

Risky tool definition detected

Unauthorized Communication

Context Poisoning

Uses hybrid similarity (character trigram Jaccard + token Jaccard) to detect matches even when titles differ across platforms. These cross-platform signals are the strongest evidence that something actually matters. **Channel authority weighting** - Boosts results from established creators. Source-specific engagement normalization ensures a 500-upvote Reddit thread and a 5,000-like X post are compared on equal footing.

Malicious tool definition detected

Malicious tool definition detected

Malicious tool definition detected

Malicious tool definition detected

Bird's search client uses Twitter's internal GraphQL API with: - Rotating QueryIDs (hardcoded + runtime refresh from x.com) - Specific request header construction (bearer token, csrf, client UUIDs) - Cursor-based pagination with Twitter-specific response parsing - The `@steipete/sweet-cookie` dependency for browser cookie extraction Porting all of this to Python is ~1000 lines of fragile reverse-engineering. Vendoring the working JS code is faster, safer, and easier to maintain since the archive

## What This Does NOT Change - Python remains the orchestrator - bird_x.py still does query construction, retry logic, response parsing - The fallback chain stays: vendored search -> xAI API -> web-only - Cookie auth mechanism is identical (env vars or browser extraction) - JSON output format is identical - no changes needed in score.py or format.py - xai_x.py is completely untouched ## References - Bird CLI archive: `github.com/mvanhorn/bird-cli-archive` - Local vendor tarball: `vendor/steipete

Risky tool definition detected

## Commands ```bash python3 scripts/last30days.py "test query" --emit=compact # Run research bash scripts/sync.sh # Deploy to ~/.claude, ~/.agents, ~/.codex ``` ## Rules - `lib/__init__.py` must be bare package marker (comment only, NO eager imports) - After edits: run `bash scripts/sync.sh` to deploy - Git remotes: origin=private, upstream=public

Malicious tool definition detected

**Risk: Pagination latency.** Deep mode with 3 pages x 4 queries = 12 API calls.

Risky tool definition detected

## Implementation Phases ### Phase 0: Fork Repository - [ ] Create new repo `last30days-free-reddit` (or branch in private repo) - [ ] `git clone /Users/mvanhorn/last30days-skill-private /Users/mvanhorn/last30days-free-reddit` - [ ] Create feature branch: `feat/free-reddit` - [ ] Verify all existing tests pass on the new branch ### Phase 1: reddit_json.py — Core .json Search - [ ] Create `scripts/lib/reddit_json.py` - `search_reddit_json(topic: str, depth: str, date_from: str, date_to: str) -> l

Malicious tool definition detected

Tool passed security scan

Malicious tool definition detected

--- ### #30 — Bird cookie auth: source availability mapping misses reddit-web + Bird combination **Author:** volarian-vai | **Created:** 2026-02-19 > When using Bird cookie auth without `XAI_API_KEY` but with a web search key (e.g., `BRAVE_API_KEY`), the source override logic misses the `reddit-web` → `all` mapping. **Proposed action:** **FIX (accept)** Legitimate edge case in source availability logic. The fix is a small addition to the Bird override block in `scripts/last30days.py` (~line 917)

> > Bird's Twitter GraphQL search client is now vendored directly into the skill at `scripts/lib/vendor/bird-search/`. No npm install, no Homebrew, no external dependency. Just needs Node.js 22+ in your PATH. > > If you're on an older version, update to v2.1: > ``` > npx skills add https://github.com/mvanhorn/last30days-skill > ``` > > Authentication still works via Safari cookies (auto-detected) or `AUTH_TOKEN`/`CT0` environment variables.

Closing — please reopen if you're still experiencing this on the latest version.

Malicious tool definition detected

// Copy them too when present so our snapshot reflects the current browser state. copySidecar(options.dbPath, `${tempDbPath}-wal`, '-wal'); copySidecar(options.dbPath, `${tempDbPath}-shm`, '-shm'); } catch (error) { rmSync(tempDir, { recursive: true, force: true }); warnings.push(`Failed to copy Chrome cookie DB: ${error instanceof Error ?

Risky tool definition detected

# Priority: .claude/last30days.env > ~/.config/last30days/.env > env vars PROJECT_ENV=".claude/last30days.env" GLOBAL_ENV="$HOME/.config/last30days/.env" # Helper: warn if file permissions are too open check_perms() { local file="$1" if [[ !

Malicious tool definition detected

Tool passed security scan

Risky tool definition detected

- Search + mentions via GraphQL (latest timeline). - JSON5 config files (`~/.config/bird/config.json5`, `./.birdrc.json5`) with engine defaults, profiles, allowChrome/allowFirefox, and timeoutMs.

Risky tool definition detected

## Shared Configuration - **Database**: `~/.local/share/last30days/research.db` (SQLite, WAL mode) - **Briefings**: `~/.local/share/last30days/briefs/` - **API keys**: `~/.config/last30days/.env` or environment variables - **Key priority**: env vars > config file ### API Keys | Key | Required | Purpose | |---|---|---| | `OPENAI_API_KEY` | For Reddit | Reddit search via OpenAI responses API | | `XAI_API_KEY` | For X (fallback) | X search via xAI Grok API | | `PARALLEL_API_KEY` | Optional | Web se

Risky tool definition detected

```bash uv run python scripts/evaluate_search_quality.py \ --baseline-rev origin/main \ --candidate-rev HEAD \ --no-default-topics \ --topic "cursor IDE pricing" \ --per-source-limit 5 ``` Gemini configuration: - preferred on this workspace: set `GOOGLE_API_KEY` - also accepted: `GEMINI_API_KEY` or `GOOGLE_GENAI_API_KEY` - optional: set `GEMINI_MODEL` - default model is `gemini-3-pro-preview` for the direct Gemini API Notes: - The script forces a clean env-based auth path when it shells out to `

Risky tool definition detected

### Plan - Read the diff carefully against our current `cache.py`, `render.py`, `bird_x.py` - Cherry-pick the `LAST30DAYS_CACHE_DIR` and `LAST30DAYS_OUTPUT_DIR` env overrides - Cherry-pick the bird_x noise stripping + retry logic if it doesn't conflict with our existing bird_x changes - Skip `agents/openai.yaml` — we have our own multi-path resolution - Skip platform-neutral wording changes - Comment on PR thanking contributor and explaining what landed ### Acceptance Criteria - [ ] `LAST30DAYS_

The same feature landed on main via PR #37 (from a separate contributor who built on similar ideas).

Tool passed security scan

Risky tool definition detected

Description: warnings } = await ctx.resolveCredentialsFromOptions(opts); for (const warning of warnings) { console.error(`${ctx.p('warn')}${warning}`); } if (!cookies.authToken || !cookies.ct0) { console.error(`${ctx.p('err')}Missing required credentials`); process.exit(1); } const client = new TwitterClient({ cookies, timeoutMs }); const result = await client.getUserAboutAccount(normalizedHandle); if (result.success && result.aboutProfile) { if (cmdOpts.json) { console.log(JSON.stringify(result

Risky tool definition detected

Description: add youtube keyword | | `.claude-plugin/marketplace.json` | Add version, update description | ## References - [13-point ClawHub checklist](https://gist.github.com/adhishthite/0db995ecfe2f23e09d0b2d418491982c) - [ClawHub docs](https://docs.openclaw.ai/tools/clawhub) - [ClawHub Developer Guide 2026](https://www.digitalapplied.com/blog/clawhub-skills-marketplace-developer-guide-2026) - Your passing skills: `clawdbot-skill-xai`, `clawdbot-skill-search-x` (exact pattern replicated)

Risky tool definition detected

## Current State - **Private repo:** `https://github.com/mvanhorn/last30days-skill-private` - 52 commits ahead of public - **Public repo:** `https://github.com/mvanhorn/last30days-skill` - last commit is V1 (`cc892d7`) - **Upstream remote:** Already configured in private repo - **Untracked files in private:** test logs, draft plans - these should NOT be pushed ## Steps ### Step 1: Clean up private repo - [ ] Review untracked files - make sure nothing sensitive gets pushed - [ ] Decide: commit th

Malicious tool definition detected

When set, the script skips native web search backends even if API keys are configured, and emits the `### WEBSEARCH REQUIRED ###` signal so the assistant handles it.

Data Exfiltration

Shadow Persistence

Supply Chain Compromise

Prompt Injection

Privilege Escalation

Resource Abuse

Context Poisoning

Guardrail Bypass

Malicious tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"hostMatch.d.ts","sourceRoot":"","sources":["../../src/util/hostMatch.ts"],"names":[],"mappings":"AAAA,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAKnF"}

Malicious tool definition detected

Description: **Hacker News**, and web" - [x] Add HN to stats block template: ``` ├─ 🟡 HN: {N} stories │ {N} points │ {N} comments ``` - [x] Update `metadata.clawdbot.tags` to include `hackernews` - [x] Update Security section: add `hn.algolia.com` to endpoints list - [x] Update citation priority to include HN: Reddit > X > YouTube > HN > Web ## Acceptance Criteria - [x] `python3 scripts/last30days.py "AI coding agents" --emit=compact` shows HN section with stories, points, and comment counts - [

Risky tool definition detected

Malicious tool definition detected

**Token efficiency is driving MCP server design** - A semantic graph MCP server cut context from 15K to 3K tokens (r/ClaudeCode), while 25 MCP servers that return structured data instead of terminal formatting emerged on r/ClaudeAI. The efficiency concern also shows up in SkillSandbox (hn/ClaytheMachine), which uses capability-based sandboxing to limit what skills can access.

Malicious tool definition detected

Description: {"version":3,"file":"expire.d.ts","sourceRoot":"","sources":["../../src/util/expire.ts"],"names":[],"mappings":"AAAA,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CA6BjF"}

Malicious tool definition detected

Malicious tool definition detected

*/ export async function getLinuxChromiumSafeStoragePassword(options) { const warnings = []; // Escape hatch: if callers already know the password (or want deterministic CI behavior), // they can bypass keyring probing entirely. const overrideKey = options.app === 'edge' ?

Risky tool definition detected

Users like @devin_explores work around this by manually copying output into .md files. Meanwhile, the Python script already writes raw data to `~/.local/share/last30days/out/`, but: 1.

Description: is correct behavior since there's nothing to save yet - **Edge case**: Very long topics could produce unwieldy filenames - the 60-char truncation handles this ## Sources & References - Screenshot from @devin_explores showing manual .md file library in ~/Documents/Last30Days/ - Current output pipeline: `scripts/lib/render.py:798` (`write_outputs()`) writes to `~/.local/share/last30days/out/` - SKILL.md synthesis flow: lines 275-496 (internalize research -> show summary -> invitation)

Risky tool definition detected

Tool passed security scan

Risky tool definition detected

**Score normalization** - Ensure HN items don't systematically crowd out other sources in the merged ranking. **New improvements to discover from 15-test data:** - Regressions introduced by CROSS changes - Edge cases where Base or HN outperforms CROSS - Topic-specific tuning opportunities ## Acceptance Criteria - [x] All 15 JSON result files saved and non-empty - [x] All 15 runs use identical source routing (verified via --diagnose) - [x] __pycache__ cleaned between every git checkout - [x] Comp

Risky tool definition detected

Tool: last30days/test-run.log Description: 📁 Output directory: /Users/mvanhorn/last30days-skill-private/docs/test-results/v1-vs-v2-20260206-231338 📦 Backing up current V2 SKILL.md...

Tool passed security scan

Malicious tool definition detected

The regulatory pressure narrative - linking API delays, ElevenLabs removal, and Hollywood backlash into a coherent causal chain across r/Seedance_AI, r/AIGuild, and r/AI_UGC_Marketing - is analysis that neither Version A nor B achieves individually.

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/edgeSqliteWindows.js Description: import path from 'node:path'; import { decryptChromiumAes256GcmCookieValue } from './chromeSqlite/crypto.js'; import { getCookiesFromChromeSqliteDb } from './chromeSqlite/shared.js'; import { getWindowsChromiumMasterKey } from './chromium/windowsMasterKey.js'; import { resolveChromiumPathsWindows } from './chromium/windowsPaths.js'; export async function getCookies

Malicious tool definition detected

- Instagram/TikTok not running in web-only mode when `--search=instagram` used without Reddit/X ``` - [ ] **SKILL.md** frontmatter — Bump version from "2.7" to "2.8" - [ ] **SKILL.md** description — Add Instagram to the description field ### Commit & tag - [ ] Stage all changes: modified files + 4 new files (`scripts/lib/instagram.py`, 3 plan docs) - [ ] Commit with message: ``` feat: v2.8 — Instagram Reels source + TikTok ScrapeCreators migration - Add Instagram Reels as 8th research source via

Tool passed security scan

Malicious tool definition detected

Polymarket bettors have put $425M on strike timing, with 70% odds of US strikes by year-end and 57% by March 31. Pentagon brass is leaking opposition hard.

Malicious tool definition detected

**Step 3: Pass x_source to run_research** Find the `run_research` call (around line 413) and add `x_source` parameter: ```python reddit_items, x_items, web_needed, raw_openai, raw_xai, raw_reddit_enriched, reddit_error, x_error = run_research( args.topic, sources, config, selected_models, from_date, to_date, depth, args.mock, progress, x_source=x_source or "xai", ) ``` **Step 4: Verify script runs with --help** Run: `cd /Users/mvanhorn/last30days-skill-private && python3 scripts/last30days.py --

Risky tool definition detected

Run `bash /Users/mvanhorn/last30days-skill-private/scripts/sync.sh` to deploy to `~/.claude/skills/` 2.

Risky tool definition detected

### Search Quality Bug — `--flat-playlist` breaks date filtering The yt-dlp command in `youtube_yt.py:110-116`: ```bash yt-dlp ytsearch{count}:{query} --dateafter {YYYYMMDD} --flat-playlist --dump-json ``` **`--flat-playlist` causes three problems:** 1. `--dateafter` is silently ignored (no video-level metadata to filter on) 2. All items have `date: None` (upload_date not in flat-playlist JSON) 3.

Malicious tool definition detected

Description: {"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/util/base64.ts"],"names":[],"mappings":"AAAA,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAahE"}

Risky tool definition detected

**Approval Gate** - Paperclip surfaces draft for review - Matt approves/edits in Paperclip UI - On approve: triggers `post_to_x.py` with the draft content **Style Guide (extracted from existing launch threads):** ``` Format: Stats-first hook + key finding + tool credit Example (from v2.5 launch): "/last30days Anthropic Pete Hegseth" 14 Reddit threads. 29 X posts (11,559 likes).

**Approval Gate** - GitHub responses go through same Paperclip approval - Approved responses posted via `gh issue comment` or `gh pr comment` - Shoutout tweets posted via `post_to_x.py` **Response templates:** ```markdown # New Issue (bug) Thanks for the report!

Malicious tool definition detected

Description: {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

Malicious tool definition detected

**Access fragmentation creates parallel economies** - CapCut for consumers, Atlas Cloud for enterprise, Jimeng for China, third-party wrappers for everyone else, scam sites for the desperate - all serving the same model through different channels with different reliability 3.

Risky tool definition detected

**Customize SOUL.md** — this controls your bot's personality and behavior ### Security Hardening (do this immediately) - Bind gateway to localhost only, use Tailscale for remote access - Set sandbox mode to `"non-main"` - Create an explicit command allowlist (block `rm -rf`, `sudo`, `chmod`) - Rotate API keys every 90 days - Never add the bot to group chats ### Budget Option ($0) Per @shynxbt: Use a free AWS VPS + Claude Haiku model + Telegram bot = fully functional for $0. --- Want me to help y

Tool passed security scan

Malicious tool definition detected

`/last30days open claw` — GENERAL: should cite @handles in summary, emoji stats ## Files to Modify | File | Fix | Change | |------|-----|--------| | `SKILL.md` | 1, 3, 4 | Stats template, citation rules, summary structure | | `scripts/lib/openai_reddit.py` | 2 | Add subreddit fallback search | | `scripts/lib/score.py` | 2 | Soften scoring penalties | | `scripts/last30days.py` | 2 | Add minimum result guarantee | ## References - Current SKILL.md: `~/.claude/skills/last30days/SKILL.md` - Private r

Malicious tool definition detected

if (!masterKey.ok) { return { cookies: [], warnings: [masterKey.error] }; } const decrypt = (encryptedValue, opts) => { return decryptChromiumAes256GcmCookieValue(encryptedValue, masterKey.value, { stripHashPrefix: opts.stripHashPrefix, }); }; const dbOptions = { dbPath, }; if (options.profile) dbOptions.profile = options.profile; if (options.includeExpired !== undefined) dbOptions.includeExpired = options.includeExpired; if (options.debug !== undefined) dbOptions.debug = options.debug; return a

Data Exfiltration

Supply Chain Compromise

Resource Abuse

Malicious tool definition detected

Description: {"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/util/runtime.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,IAAI,OAAO,CAKtC"}

Risky tool definition detected

Malicious tool definition detected

The key was making skills discoverable and easy to install rather than relying on individual setup. **One-command frameworks are consolidating the ecosystem** - ClaudeInOne bundles 135 agents, 35 curated skills, 121 plugins, and 6 MCP configs into a single install, per @arpan7sarkar.

Tool passed security scan

Risky tool definition detected

Tool passed security scan

Malicious tool definition detected

WebSearch is identical across all 3 versions (no version difference to test) 3. Including it would confound the comparison with noise 4. The Python pipeline data is where version differences live ## Sources & References - Previous JSON analysis: [docs/plans/2026-02-25-analysis-cross-source-comparison-plan.md](docs/plans/2026-02-25-analysis-cross-source-comparison-plan.md) - data-layer comparison with scoring

Description: verdict - Previous test plan: [docs/plans/2026-02-25-feat-15-test-comparison-make-cross-goat-plan.md](docs/plans/2026-02-25-feat-15-test-comparison-make-cross-goat-plan.md) - execution protocol for 15 JSON test runs - SKILL.md synthesis instructions: `SKILL.md` lines 165-320 (Judge Agent + Display phases) - Scoring weights: `scripts/lib/score.py` - 45% relevance + 25% recency + 30% engagement - Render pipeline: `scripts/lib/render.py:57` - `render_compact()` function - Cross-source

Data Exfiltration

Context Poisoning

Malicious tool definition detected

Description: {"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/util/fs.ts"],"names":[],"mappings":"AAEA,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQnF"}

Risky tool definition detected

Insiders point to medication side effects, frequent travel, and inconsistent routines, per AllHipHop.

Risky tool definition detected

Description: {"version":3,"file":"extract-tweet-id.js","sourceRoot":"","sources":["../../src/lib/extract-tweet-id.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,eAAe,GAAG,iEAAiE,CAAC;AAE1F,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,sCAAsC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,4BAA4B;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC"}

Malicious tool definition detected

Description: {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EACX,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,YAAY,CAAC"}

Malicious tool definition detected

| | Web search backends need API keys to test | Medium | Each has a `--mock` or dry-run path.

Malicious tool definition detected

The only cost is the existing OpenAI/xAI calls for Reddit/X search, which are unchanged. **Time impact:** Adds ~10-20 seconds to research (search + parallel transcript extraction), running in parallel with Reddit/X so effective wall-clock increase is minimal.

Tool passed security scan

Malicious tool definition detected

Tool: last30days/docs/plans/2026-03-03-refactor-tiktok-apify-alternative-plan.md [2/2] Description: test suite - [ ] Commit and push ## Acceptance Criteria - [ ] TikTok search returns structured data with views, likes, comments, shares - [ ] No subscription required — pay-as-you-go only - [ ] Cost < $1/month at normal usage (5-10 searches/day) - [ ] Existing test suite passes with new backend - [ ] Graceful degradation when API key is missing (same behavior as today) ## Open Questions 1.

Malicious tool definition detected

Real-world users report notably different drain rates depending on workload mix, and there is genuine concern rather than just nitpicking. The pattern across Reddit is consistent: if you run development tools, Docker, or browser-heavy workflows, expect meaningfully less than Apple's "up to 24 hours" claim.

Tool passed security scan

Malicious tool definition detected

Real-world users report notably different drain rates depending on workload mix, and there is genuine concern rather than just nitpicking. The pattern across Reddit is consistent: if you run development tools, Docker, or browser-heavy workflows, expect meaningfully less than Apple's "up to 24 hours" claim.

YouTube view count (7.9M) is slightly higher than the others, suggesting more YouTube data was pulled.

Malicious tool definition detected

Description: {"version":3,"file":"origins.d.ts","sourceRoot":"","sources":["../../src/util/origins.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAqB/E"}

Tool passed security scan

Malicious tool definition detected

Risky tool definition detected

8. **Add `.gemini/` to the path check in sync.sh** import verification. ## Testing Plan Before merging, verify: - [ ] `gemini extensions install` works from the repo (or `gemini extensions link .` for local dev) - [ ] Skill activates in Gemini CLI and the model can find `scripts/last30days.py` - [ ] `GEMINI_EXTENSION_DIR` env var resolves correctly in the bash for-loop - [ ] Claude Code still works with no regressions (run `/last30days test topic --mock` or similar) - [ ] `allowed-tools` with on

Malicious tool definition detected

Description: {"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/util/exec.ts"],"names":[],"mappings":"AAEA,wBAAsB,WAAW,CAChC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8G3D"}

Risky tool definition detected

Malicious tool definition detected

""" import json import sys from pathlib import Path # Add scripts/ to path so we can import lib sys.path.insert(0, str(Path(__file__).parent)) from lib.schema import Report from lib.render import render_compact, render_source_status JSON_DIR = Path(__file__).parent.parent / "docs" / "comparison-results" / "json" COMPACT_DIR = Path(__file__).parent.parent / "docs" / "comparison-results" / "compact" COMPACT_DIR.mkdir(parents=True, exist_ok=True) files = sorted(JSON_DIR.glob("*.json")) files = [f f

Malicious tool definition detected

const key = deriveAes128CbcKeyFromPassword(edgePassword, { iterations: 1003 }); const decrypt = (encryptedValue, opts) => decryptChromiumAes128CbcCookieValue(encryptedValue, [key], { stripHashPrefix: opts.stripHashPrefix, treatUnknownPrefixAsPlaintext: true, }); const dbOptions = { dbPath, }; if (options.profile) dbOptions.profile = options.profile; if (options.includeExpired !== undefined) dbOptions.includeExpired = options.includeExpired; if (options.debug !== undefined) dbOptions.debug = opti

Malicious tool definition detected

* * Chromium browsers typically store their cookie encryption password under: * - service: "<Browser> Safe Storage" * - account: "<Browser>" * * We keep this logic in JS (no native deps) and return an empty password on failure * (Chromium may still have v10 cookies, and callers can use inline/export escape hatches).

Malicious tool definition detected

Risky tool definition detected

Description: {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG"}

Data Exfiltration

Tool passed security scan

Malicious tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"windowsMasterKey.d.ts","sourceRoot":"","sources":["../../../src/providers/chromium/windowsMasterKey.ts"],"names":[],"mappings":"AAKA,wBAAsB,2BAA2B,CAChD,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACX,OAAO,CACP;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IACA,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACb,CACH,CAsCA"}

Malicious tool definition detected

**Skill discovery is an unsolved problem** - Indx.sh (hn/micronink) is a directory of AI coding rules, MCP servers, and tools. ClawsMarket (hn/digitcatphd) is a marketplace where AI agents discover tools.

Tool passed security scan

Risky tool definition detected

- Specific, actionable recommendations: exact commands (`curl -fsSL https://clawd.bot/install.sh | bash`), specific model recommendations (Claude Opus 4.5 for best results, GLM 4.7 Flash for local), specific channel advice (Telegram first, WhatsApp QR code fails). - Stats box is correct emoji tree format with engagement counts: `@aashatwt (452 likes), @recap_david (329 likes)`.

7. Add emoji + engagement counts back to the output summary footer. Edit 3 lines.

Data Exfiltration

Malicious tool definition detected

``` ### Read from File ```markdown ## Research Context !cat ~/.local/share/last30days/out/last30days.context.md ``` ### Get Path for Dynamic Loading ```bash CONTEXT_PATH=$(python3 ~/.claude/skills/last30days/scripts/last30days.py "topic" --emit=path) cat "$CONTEXT_PATH" ``` ### JSON for Programmatic Use ```bash python3 ~/.claude/skills/last30days/scripts/last30days.py "topic" --emit=json > research.json ``` ## CLI Reference ``` python3 ~/.claude/skills/last30days/scripts/last30days.py <topic> [o

Risky tool definition detected

Description: {"version":3,"file":"twitter-client-bookmarks.d.ts","sourceRoot":"","sources":["../../src/lib/twitter-client-bookmarks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE9F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAExE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC9D;AAED,wBAAgB,aAAa,CAAC,KAAK,SAAS,mBAAmB,CAAC,iBAAiB,CAAC,EAChF,IAAI,EAAE,KAAK,GACV,KAAK,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAqE5C"}

Risky tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/util/runtime.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,YAAY;IAC3B,sEAAsE;IACtE,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,UAAU,GAAI,OAAO,CAAC,QAAyC,CAAC,GAAG,CAAC;IAC1E,OAAO,OAAO,CAAC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC;AACxF,CAAC"}

Risky tool definition detected

### Added - Instagram Reels as 8th research source via ScrapeCreators API — keyword search, engagement metrics (views, likes, comments), spoken-word transcript extraction (`scripts/lib/instagram.py`) - `InstagramItem` dataclass, normalization, scoring (45% relevance / 25% recency / 30% engagement), deduplication, cross-source linking, and rendering - Instagram in SKILL.md: stats template (`📸 Instagram:`), citation priority, item format description, output footer - URL-to-name extraction examples

Malicious tool definition detected

// PowerShell can call ProtectedData.Unprotect for the current user, which matches Chrome's behavior.

Risky tool definition detected

Description: {"version":3,"file":"extract-tweet-id.d.ts","sourceRoot":"","sources":["../../src/lib/extract-tweet-id.ts"],"names":[],"mappings":"AAKA,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQpD"}

Risky tool definition detected

Risky tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"edge.d.ts","sourceRoot":"","sources":["../../src/providers/edge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK5D,wBAAsB,kBAAkB,CACvC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EAC5F,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA0B3B"}

Malicious tool definition detected

Description: {"version":3,"file":"linuxPaths.d.ts","sourceRoot":"","sources":["../../../src/providers/chromium/linuxPaths.ts"],"names":[],"mappings":"AAMA,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACtD,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,GAAG,IAAI,CA0BhB"}

Tool passed security scan

Malicious tool definition detected

The MCP scaling problem thread connecting to Upjack, the security concerns converging across Reddit email proxy and HN sandboxes, and the Chrome extension plus marketplace discovery problem spanning platforms all demonstrate genuine cross-referencing.

Risky tool definition detected

## Three Headline Features in v2.9 **1. ScrapeCreators Reddit as default.** One `SCRAPECREATORS_API_KEY` now covers Reddit, TikTok, and Instagram - three sources, one key. No more `OPENAI_API_KEY` required for Reddit search.

Malicious tool definition detected

Description: {"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../src/public.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAEX,MAAM,EACN,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,MAAM,YAAY,CAAC;AAKpB;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2FtF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,GAAE,mBAAwB,GAC/B,MAAM,CAyBR"}

Malicious tool definition detected

Description: {"version":3,"file":"nodeSqlite.d.ts","sourceRoot":"","sources":["../../src/util/nodeSqlite.ts"],"names":[],"mappings":"AAAA,KAAK,gBAAgB,GAAG,cAAc,aAAa,CAAC,CAAC;AAIrD,wBAAgB,mBAAmB,IAAI,OAAO,CAQ7C;AA4BD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAmBlE"}

Malicious tool definition detected

Per @jameslmorton, a maxed 128GB M4 MacBook Pro pushes 70 tokens/s for local LLM inference, though quality varies by model. @grok highlights that 64GB M4 Pro/Max configurations can run local AI agents with zero cloud dependency and sub-second response times.

Risky tool definition detected

Opt-in via `BSKY_HANDLE` + `BSKY_APP_PASSWORD` app password - **Comparative mode** (`ecf90c0`) - "X vs Y" queries run 3 parallel research passes and output side-by-side comparison - **Per-project .env config** (PR #59) - `.last30days.env` in project root for per-project API keys - **SessionStart config check** (PR #58) - Validates config on session start - **Expanded test coverage** (PRs #56, #57) - Unit tests for untested modules + smoke tests + edge cases - **Claude Code marketplace plugin** (

Malicious tool definition detected

Description: {"version":3,"file":"chrome.d.ts","sourceRoot":"","sources":["../../src/providers/chrome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK5D,wBAAsB,oBAAoB,CACzC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EAC5F,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA0B3B"}

Data Exfiltration

Risky tool definition detected

Description: {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAML,aAAa,GAGd,MAAM,qBAAqB,CAAC"}

Malicious tool definition detected

Sources: - Movie starring Logan Paul made exclusively with AI released - Newsweek - The Dor Brothers: Pioneers in AI Video Production - ...

Risky tool definition detected

Description: {"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../../src/lib/cli-args.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAKF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM1D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,aAAa,CAiBjG"}

Tool passed security scan

Risky tool definition detected

Malicious tool definition detected

Malicious tool definition detected

const key = deriveAes128CbcKeyFromPassword(chromePassword, { iterations: 1003 }); const decrypt = (encryptedValue, opts) => decryptChromiumAes128CbcCookieValue(encryptedValue, [key], { stripHashPrefix: opts.stripHashPrefix, treatUnknownPrefixAsPlaintext: true, }); const dbOptions = { dbPath, }; if (options.profile) dbOptions.profile = options.profile; if (options.includeExpired !== undefined) dbOptions.includeExpired = options.includeExpired; if (options.debug !== undefined) dbOptions.debug = op

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/edgeSqliteLinux.d.ts Description: import type { GetCookiesResult } from '../types.js'; export declare function getCookiesFromEdgeSqliteLinux(options: { profile?: string;

Tool passed security scan

Malicious tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"safariBinaryCookies.d.ts","sourceRoot":"","sources":["../../src/providers/safariBinaryCookies.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK5D,wBAAsB,oBAAoB,CACzC,OAAO,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACpD,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAqC3B"}

Risky tool definition detected

Description: {"version":3,"file":"twitter-client-media.d.ts","sourceRoot":"","sources":["../../src/lib/twitter-client-media.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACtG;AAED,wBAAgB,SAAS,CAAC,KAAK,SAAS,mBAAmB,CAAC,iBAAiB,CAAC

Malicious tool definition detected

Stores topics, research runs, and findings with: - WAL mode for safe concurrent access (cron + user) - FTS5 full-text search with porter+unicode61 tokenizer - URL-based dedup with engagement metric updates on re-sighting - Lightweight schema migrations without external dependencies Database location: ~/.local/share/last30days/research.db """ import argparse import json import sqlite3 import sys from datetime import datetime, timedelta from pathlib import Path from typing import Any, Dict, List,

Tool passed security scan

Malicious tool definition detected

And the best part is these capabilities are designed to work together. Your cloudMD file sets the foundation. MCP [music] servers connect the data.

Malicious tool definition detected

treatUnknownPrefixAsPlaintext?: boolean; }): string | null; export declare function decryptChromiumAes256GcmCookieValue(encryptedValue: Uint8Array, key: Buffer, options: { stripHashPrefix: boolean; }): string | null; //# sourceMappingURL=crypto.d.ts.map

Tool passed security scan

Malicious tool definition detected

Future: Add handle search to xai_x.py using `allowed_x_handles` filter For v1, accept this limitation. Bird is free and most X-enabled users have it.

Malicious tool definition detected

@singhprateek_25's X post listing 2026 fresher requirements includes both React and Svelte side by side, signaling that hiring managers are at least aware. The government portal evaluation in r/sveltejs - a developer coming from .NET and React, seriously weighing Svelte for accessibility, SEO, and forms - suggests Svelte is crossing the threshold from "side project framework" to "enterprise candidate." **Post-framework thinking is emerging.** @cityjsconf announced a talk on Ripple that cherry-pi

Malicious tool definition detected

The gap between controlled reviewer testing and real usage with Chrome, Slack, and Docker running is meaningful enough to generate repeat threads. **Long-term ownership tells the real story.** The launch-day review cycle was overwhelmingly positive, but the 3-to-12-month follow-ups are more measured.

Risky tool definition detected

Malicious tool definition detected

```ts import { getCookies, toCookieHeader } from '@steipete/sweet-cookie'; const { cookies, warnings } = await getCookies({ url: 'https://example.com/', names: ['session', 'csrf'], browsers: ['chrome', 'edge', 'firefox', 'safari'], }); for (const w of warnings) console.warn(w); const cookieHeader = toCookieHeader(cookies, { dedupeByName: true }); ``` Docs + extension exporter: see the repo root README.

Tool passed security scan

Risky tool definition detected

Tool: last30days/scripts/lib/score.py [3/3] Description: = int(item.relevance * 100) # Recency subscore rec_score = dates.recency_score(item.date) # Store subscores (engagement is 0 for WebSearch - no data) item.subs = schema.SubScores( relevance=rel_score, recency=rec_score, engagement=0, # Explicitly zero - no engagement data available ) # Compute overall score using WebSearch weights overall = ( WEBSEARCH_WEIGHT_RELEVANCE * rel_score + WEBSEARCH_WEIGHT_RECENCY * rec_score ) # Apply source pen

Malicious tool definition detected

Description: {"version":3,"file":"windowsDpapi.d.ts","sourceRoot":"","sources":["../../../src/providers/chromeSqlite/windowsDpapi.ts"],"names":[],"mappings":"AAEA,wBAAsB,cAAc,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BrE"}

Risky tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"inline.d.ts","sourceRoot":"","sources":["../../src/providers/inline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK5D,KAAK,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAkC3B"}

Risky tool definition detected

Malicious tool definition detected

Description: {"version":3,"file":"windowsPaths.d.ts","sourceRoot":"","sources":["../../../src/providers/chromium/windowsPaths.ts"],"names":[],"mappings":"AAKA,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACpD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAmCxD"}

Risky tool definition detected

Description: {"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CA4C5E"}

Malicious tool definition detected

Description: {"version":3,"file":"hostMatch.js","sourceRoot":"","sources":["../../src/util/hostMatch.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,YAAoB;IACzE,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7F,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;IACnD,OAAO,cAAc,KAAK,WAAW,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;AACrF,CAAC"}

Risky tool definition detected

Real money on outcomes. --- ## Post 3: CROSS-SOURCE LINKING. When a Seedance 2.0 tutorial has 44K YouTube views AND trends on HN AND gets discussed on Reddit, v2.5 flags it: [also on: HN, YouTube] Old version linked 3 items across 5 test topics. New version links 13. The difference is hybrid similarity - combining character-trigram and token-level matching at a tuned threshold. Cross-platform convergence is the strongest signal that something actually matters. Not engagement on one platform.

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/edgeSqliteLinux.d.ts.map

Malicious tool definition detected

Description: {"version":3,"file":"chromeSqliteWindows.d.ts","sourceRoot":"","sources":["../../src/providers/chromeSqliteWindows.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAMpD,wBAAsB,iCAAiC,CACtD,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACxE,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAmC3B"}

Tool passed security scan

Malicious tool definition detected

## Sources & References - Current text similarity: `scripts/lib/polymarket.py:236` - Render format: `scripts/lib/render.py:282` - SKILL.md synthesis: `SKILL.md:196` (Judge Agent section) - Previous quality ranking plan: `docs/plans/2026-02-25-feat-polymarket-quality-ranking-plan.md`

Tool passed security scan

Malicious tool definition detected

**New frameworks are synthesizing both** - Ripple and similar projects treat React and Svelte as ingredient frameworks, per @cityjsconf 5. **TypeScript-first tooling is the real 2026 baseline** - @FabianHiller's post about type-safe forms got the most engagement, suggesting developers care more about DX tooling than framework wars --- All agents reported back!

Tool passed security scan

Malicious tool definition detected

**SKILL.md instruction #7** - "Cross-platform signals are the strongest evidence" directs Claude to lead with multi-platform findings ### Cross-source linking validation | Topic | Original links | Improved links | |-------|:-:|:-:| | Claude Code | 0 | 2 items, 2 [also on:] tags | | Seedance | 3 | 9 items, 7 [also on:] tags | | MacBook | 0 | 2 items, 1 [also on:] tag | | Rap Songs | 0 | 0 (expected - no overlap) | | React/Svelte | 0 | 0 (expected - no overlap) | | **Total** | **3** | **13** | ##

Risky tool definition detected

Description: {"version":3,"file":"post.d.ts","sourceRoot":"","sources":["../../src/commands/post.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AAyB9D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CA4F5E"}

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqliteLinux.d.ts Description: import type { GetCookiesResult } from '../types.js'; export declare function getCookiesFromChromeSqliteLinux(options: { profile?: string;

Tool passed security scan

Risky tool definition detected

--- ## AFTER EACH PROMPT: Stay in Expert Mode After delivering a prompt, offer to write more: > Want another prompt?

Malicious tool definition detected

Description: {"version":3,"file":"firefoxSqlite.d.ts","sourceRoot":"","sources":["../../src/providers/firefoxSqlite.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA0B,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK5E,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,EACvD,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAmD3B"}

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqliteLinux.d.ts.map

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/edgeSqliteWindows.d.ts Description: import type { GetCookiesResult } from '../types.js'; export declare function getCookiesFromEdgeSqliteWindows(options: { profile?: string;

Malicious tool definition detected

Description: {"version":3,"file":"chromeSqliteMac.d.ts","sourceRoot":"","sources":["../../src/providers/chromeSqliteMac.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AASpD,wBAAsB,6BAA6B,CAClD,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACxE,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA6C3B"}

Malicious tool definition detected

Description: {"version":3,"file":"edgeSqliteWindows.d.ts","sourceRoot":"","sources":["../../src/providers/edgeSqliteWindows.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAMpD,wBAAsB,+BAA+B,CACpD,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACxE,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAmC3B"}

Malicious tool definition detected

import queryIds from './query-ids.json' with { type: 'json' }; export const TWITTER_API_BASE = 'https://x.com/i/api/graphql'; export const TWITTER_GRAPHQL_POST_URL = 'https://x.com/i/api/graphql'; export const TWITTER_UPLOAD_URL = 'https://upload.twitter.com/i/media/upload.json'; export const TWITTER_MEDIA_METADATA_URL = 'https://x.com/i/api/1.1/media/metadata/create.json'; export const TWITTER_STATUS_UPDATE_URL = 'https://x.com/i/api/1.1/statuses/update.json'; export const SETTINGS_SCREEN_NAME_

Risky tool definition detected

Description: {"version":3,"file":"follow.d.ts","sourceRoot":"","sources":["../../src/commands/follow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAmCnD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CA8E9E"}

Risky tool definition detected

import queryIds from './query-ids.json' with { type: 'json' }; export const TWITTER_API_BASE = 'https://x.com/i/api/graphql'; export const TWITTER_GRAPHQL_POST_URL = 'https://x.com/i/api/graphql'; export const TWITTER_UPLOAD_URL = 'https://upload.twitter.com/i/media/upload.json'; export const TWITTER_MEDIA_METADATA_URL = 'https://x.com/i/api/1.1/media/metadata/create.json'; export const TWITTER_STATUS_UPDATE_URL = 'https://x.com/i/api/1.1/statuses/update.json'; export const SETTINGS_SCREEN_NAME_

Malicious tool definition detected

Supply Chain Compromise

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/shared.d.ts Description: import type { GetCookiesResult } from '../../types.js'; export declare function getCookiesFromChromeSqliteDb(options: { dbPath: string; profile?: string;

Malicious tool definition detected

Tool: last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/edgeSqliteMac.d.ts.map

Risky tool definition detected

Description: {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

Risky tool definition detected

Description: {"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,OAAO,EAAE,KAAK,UAAU,EAAuB,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,cAAc,aAyBzB,CAAC;AAEH,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CA+GtD"}

Malicious tool definition detected

Risky tool definition detected

Risky tool definition detected

Description: {"version":3,"file":"home.d.ts","sourceRoot":"","sources":["../../src/commands/home.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CA8C3E"}

Risky tool definition detected

Description: {"version":3,"file":"twitter-client-posting.d.ts","sourceRoot":"","sources":["../../src/lib/twitter-client-posting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG9F,OAAO,KAAK,EAAuB,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAElF,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC

Risky tool definition detected

Description: {"version":3,"file":"thread-filters.d.ts","sourceRoot":"","sources":["../../src/lib/thread-filters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAS1E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,SAAS,GAAG,SAAS,EAAE,CAqC9F;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,SAAS,GAAG,SAAS,EAAE,CAG7F;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,EAAE,EACnB,eAAe,EAAE,SAAS,EAC1B,OAAO,GAAE;IAAE,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAAO,GAClD,SAAS,EAA

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan

Tool passed security scan