Browse and search Hacker News. Fetch top, new, best, Ask HN, Show HN stories and job postings. View item details, comments, and user profiles. Search stories and comments via Algolia. Find "Who is hiring?" threads. Use for any HN-related queries like "what's trending on HN?", "search HN for AI", "show comments on story X", "who is hiring?", "latest Ask HN posts".
Security Analysis
high confidenceThe skill is internally consistent: it implements a read-only Hacker News CLI using public HN/Algolia APIs, asks for no credentials, and has no install step — however the package metadata omits that the script requires curl, jq and python3.
Name/description match the included code and docs: the script fetches Hacker News lists, items, comments, users, and (per references) uses Algolia for search. One small inconsistency: registry metadata lists no required binaries, but the script clearly uses curl, jq and python3.
SKILL.md tells the agent to run the provided scripts/hn.sh CLI and documents commands. The runtime instructions and the script stay within the stated purpose (fetching HN data from public APIs). There are no instructions to read unrelated files, exfiltrate secrets, or contact unexpected endpoints.
There is no install spec (instruction-only), so nothing is written to disk at install time. The script will run local commands and temporary files (mktemp). Note: because there is no install step, callers must have curl, jq and python3 available — the registry metadata did not declare these dependencies.
The skill requires no environment variables or credentials and only contacts public Hacker News (Firebase) and Algolia endpoints. No sensitive env vars or unrelated service credentials are requested.
The skill does not request persistent inclusion (always: false) and does not modify other skills or system-wide settings. It relies on executing the provided script when invoked.
Guidance
This skill appears to do what it says: a lightweight CLI that reads public Hacker News APIs and Algolia. Before installing or running it, ensure your environment has curl, jq and python3 available (the metadata omitted those). Review the script if you are uncomfortable executing code from an unknown source — it performs network calls to hacker-news.firebaseio.com and hn.algolia.com and writes temporary files under a tmpdir which it then removes. Because it runs shell commands, run in a restricted environment or sandbox if you want to limit risk.
Latest Release
v1.0.0
Initial release of the Hacker News skill: - Browse top, new, best, Ask HN, Show HN stories, and job postings. - View item details, comments, and user profiles. - Search stories and comments using Algolia. - Find and view "Who is hiring?" threads. - Supports CLI usage for all features with customizable limits and filters. - Outputs clean, readable results with auto-converted text and relative timestamps.
More by @gchapim
Published by @gchapim on ClawHub
