Skip to main content

last30days

Synthesizes recent discussions from multiple social media platforms into comprehensive, cited reports for informed decision-making.

Install this skill

or
0/100

Security score

The last30days skill was audited on Jun 10, 2026 and we found 47 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 256

Template literal with variable interpolation in command context

SourceSKILL.md
256```bash
medium line 593

Template literal with variable interpolation in command context

SourceSKILL.md
593```bash
medium line 911

Template literal with variable interpolation in command context

SourceSKILL.md
911```bash
medium line 934

Template literal with variable interpolation in command context

SourceSKILL.md
934```bash
medium line 86

Access to hidden dotfiles in home directory

SourceSKILL.md
86**Why this specific check:** `~/.claude/plugins/marketplaces/last30days-skill/` is a git clone Claude Code auto-restores to `origin/main` on session start. It can lag the versioned cache by one or mor
medium line 88

Access to hidden dotfiles in home directory

SourceSKILL.md
88**Other install paths are fine:** `~/.codex/skills/`, `~/.agents/skills/`, an `npx skills add` install dir, or a repo checkout are all valid load points - the resolver in Step 1 picks them up. Do NOT
medium line 96

Access to hidden dotfiles in home directory

SourceSKILL.md
96**Named failure mode (2026-04-18 public v3.0.6 0/8 regression):** on 8 consecutive public invocations, Opus 4.7 treated `/last30days` as a generic research keyword and improvised. Every single run vio
medium line 281

Access to hidden dotfiles in home directory

SourceSKILL.md
281- If `~/.config/last30days/.env` does NOT exist, this is a first run.
medium line 287

Access to hidden dotfiles in home directory

SourceSKILL.md
287- After the wizard writes `SETUP_COMPLETE=true` to `~/.config/last30days/.env`, proceed to research.
low line 597

Access to hidden dotfiles in home directory

SourceSKILL.md
597# Read ~/.claude/skills/last30days/SKILL.md → SKILL_DIR=$HOME/.claude/skills/last30days
low line 598

Access to hidden dotfiles in home directory

SourceSKILL.md
598# Read ~/.codex/skills/last30days/SKILL.md → SKILL_DIR=$HOME/.codex/skills/last30days
low line 599

Access to hidden dotfiles in home directory

SourceSKILL.md
599# Read ~/.claude/plugins/cache/last30days-skill/last30days/3.3.2/skills/last30days/SKILL.md
low line 915

Access to hidden dotfiles in home directory

SourceSKILL.md
915# Read ~/.claude/skills/last30days/SKILL.md → SKILL_DIR=$HOME/.claude/skills/last30days
low line 916

Access to hidden dotfiles in home directory

SourceSKILL.md
916# Read ~/.codex/skills/last30days/SKILL.md → SKILL_DIR=$HOME/.codex/skills/last30days
low line 917

Access to hidden dotfiles in home directory

SourceSKILL.md
917# Read ~/.claude/plugins/cache/last30days-skill/last30days/3.3.2/skills/last30days/SKILL.md
medium line 1594

Access to hidden dotfiles in home directory

SourceSKILL.md
1594- If they say **"more fun"**, **"too serious"**, or similar → Write `FUN_LEVEL=high` to `~/.config/last30days/.env` (append, don't overwrite). Confirm: "Fun level set to high. Next run will surface mo
medium line 1595

Access to hidden dotfiles in home directory

SourceSKILL.md
1595- If they say **"less fun"**, **"too many jokes"**, or similar → Write `FUN_LEVEL=low` to `~/.config/last30days/.env`. Confirm: "Fun level set to low. Next run will focus on the news."
medium line 1596

Access to hidden dotfiles in home directory

SourceSKILL.md
1596- If they say **"eli5 on"**, **"eli5 mode"**, **"explain simpler"**, or similar → Write `ELI5_MODE=true` to `~/.config/last30days/.env`. Confirm: "ELI5 mode on. All future runs will explain things lik
medium line 1597

Access to hidden dotfiles in home directory

SourceSKILL.md
1597- If they say **"eli5 off"**, **"normal mode"**, **"full detail"**, or similar → Write `ELI5_MODE=false` to `~/.config/last30days/.env`. Confirm: "ELI5 mode off. Back to full detail."
medium line 281

Access to .env file

SourceSKILL.md
281- If `~/.config/last30days/.env` does NOT exist, this is a first run.
medium line 287

Access to .env file

SourceSKILL.md
287- After the wizard writes `SETUP_COMPLETE=true` to `~/.config/last30days/.env`, proceed to research.
medium line 326

Access to .env file

SourceSKILL.md
326**Confirm the topic with a branded, truthful message. Build ACTIVE_SOURCES_LIST by checking what's configured in .env:**
medium line 1453

Access to .env file

SourceSKILL.md
1453- "Scan my browser cookies (free)" - Get consent, run cookie scan, write BROWSER_CONSENT=true + FROM_BROWSER=auto to .env
medium line 1454

Access to .env file

SourceSKILL.md
1454- "I have an xAI API key" - Ask them to paste it, write XAI_API_KEY to .env
medium line 1594

Access to .env file

SourceSKILL.md
1594- If they say **"more fun"**, **"too serious"**, or similar → Write `FUN_LEVEL=high` to `~/.config/last30days/.env` (append, don't overwrite). Confirm: "Fun level set to high. Next run will surface mo
medium line 1595

Access to .env file

SourceSKILL.md
1595- If they say **"less fun"**, **"too many jokes"**, or similar → Write `FUN_LEVEL=low` to `~/.config/last30days/.env`. Confirm: "Fun level set to low. Next run will focus on the news."
medium line 1596

Access to .env file

SourceSKILL.md
1596- If they say **"eli5 on"**, **"eli5 mode"**, **"explain simpler"**, or similar → Write `ELI5_MODE=true` to `~/.config/last30days/.env`. Confirm: "ELI5 mode on. All future runs will explain things lik
medium line 1597

Access to .env file

SourceSKILL.md
1597- If they say **"eli5 off"**, **"normal mode"**, **"full detail"**, or similar → Write `ELI5_MODE=false` to `~/.config/last30days/.env`. Confirm: "ELI5 mode off. Back to full detail."
low line 201

External URL reference

SourceSKILL.md
201**BAD (raw URL):** `per https://www.rollingstone.com/music/music-news/kanye-west-bully-1235506094/`
low line 204

External URL reference

SourceSKILL.md
204**GOOD:** `per [Rolling Stone](https://www.rollingstone.com/music/music-news/kanye-west-bully-1235506094/)`, `per [@honest30bgfan_](https://x.com/honest30bgfan_)`, `[r/hiphopheads](https://reddit.com/
low line 1392

External URL reference

SourceSKILL.md
13921. @handles from X - `per [@handle](https://x.com/handle)` (these prove the tool's unique value)
low line 1393

External URL reference

SourceSKILL.md
13932. r/subreddits from Reddit - `per [r/subreddit](https://reddit.com/r/subreddit)` (when citing Reddit, YouTube, or TikTok, prefer quoting top comments over just the thread title)
low line 1394

External URL reference

SourceSKILL.md
13943. YouTube channels - `per [channel name](https://youtube.com/@channel) on YouTube` (transcript-backed insights)
low line 1395

External URL reference

SourceSKILL.md
13954. TikTok creators - `per [@creator](https://tiktok.com/@creator) on TikTok` (viral/trending signal)
low line 1396

External URL reference

SourceSKILL.md
13965. Instagram creators - `per [@creator](https://instagram.com/creator) on Instagram` (influencer/creator signal)
low line 1397

External URL reference

SourceSKILL.md
13976. HN discussions - `per [HN](https://news.ycombinator.com/item?id=N)` or `per [hn/username](https://news.ycombinator.com/user?id=username)` (developer community signal)
low line 1398

External URL reference

SourceSKILL.md
13987. Polymarket - `[Polymarket](https://polymarket.com/event/...) has X at Y% (up/down Z%)` with specific odds and movement
low line 1399

External URL reference

SourceSKILL.md
13998. Web sources - ONLY when Reddit/X/YouTube/TikTok/Instagram/HN/Polymarket don't cover that specific fact; link the publication: `per [Rolling Stone](https://rollingstone.com/...)`
low line 1407

External URL reference

SourceSKILL.md
1407**GOOD:** "His album BULLY drops March 20 - fans on X are split on the tracklist, per [@honest30bgfan_](https://x.com/honest30bgfan_)"
low line 1408

External URL reference

SourceSKILL.md
1408**GOOD:** "Ye's apology got massive traction on [r/hiphopheads](https://reddit.com/r/hiphopheads)"
low line 1409

External URL reference

SourceSKILL.md
1409**OK** (web, only when Reddit/X don't have it): "The Hellwatt Festival runs July 4-18 at RCF Arena, per [Billboard](https://www.billboard.com/music/music-news/hellwatt-festival-2026-lineup-...)"
low line 1428

External URL reference

SourceSKILL.md
1428**{Headline summarizing topic 1}** - [1-2 sentences about what people are saying, per [@handle](https://x.com/handle) or [r/sub](https://reddit.com/r/sub)]
low line 1430

External URL reference

SourceSKILL.md
1430**{Headline summarizing topic 2}** - [1-2 sentences, per [@handle](https://x.com/handle) or [r/sub](https://reddit.com/r/sub)]
low line 1432

External URL reference

SourceSKILL.md
1432**{Headline summarizing topic 3}** - [1-2 sentences, per [@handle](https://x.com/handle) or [r/sub](https://reddit.com/r/sub)]
low line 1435

External URL reference

SourceSKILL.md
14351. [Pattern] - per [@handle](https://x.com/handle)
low line 1436

External URL reference

SourceSKILL.md
14362. [Pattern] - per [r/sub](https://reddit.com/r/sub)
low line 1437

External URL reference

SourceSKILL.md
14373. [Pattern] - per [@handle](https://x.com/handle)
Scanned on Jun 10, 2026
View Security Dashboard