Scan Report
5 /100
follow-builders
AI builders digest — monitors top AI builders on X and YouTube podcasts, remixes their content into digestible summaries
A legitimate content curation skill with fully documented network access, shell commands, and credential usage — all scoped to known API services.
Safe to install
No action needed. The skill is safe to use as designed.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md: creates ~/.follow-builders/config.json, state.json, prompts/ — all doc… |
| Network | READ | READ | ✓ Aligned | SKILL.md metadata: requires SUPADATA_API_KEY; scripts make HTTPS calls to api.su… |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md documents all bash usage: config file creation via heredoc, crontab set… |
| Environment | READ | READ | ✓ Aligned | SKILL.md metadata declares SUPADATA_API_KEY; scripts read .env via dotenv for TE… |
| Skill Invoke | READ | READ | ✓ Aligned | Scripts run other node scripts (prepare-digest.js, deliver.js) as documented in … |
109 findings
Medium External URL 外部 URL
https://www.youtube.com/@LatentSpacePod README.md:69 Medium External URL 外部 URL
https://www.youtube.com/playlist?list=PLOhHNjZItNnMm5tdW61JpnyxeYH5NDDx8 README.md:70 Medium External URL 外部 URL
https://www.youtube.com/@NoPriorsPodcast README.md:71 Medium External URL 外部 URL
https://www.youtube.com/@RedpointAI README.md:72 Medium External URL 外部 URL
https://www.youtube.com/@DataDrivenNYC README.md:73 Medium External URL 外部 URL
https://x.com/karpathy README.md:76 Medium External URL 外部 URL
https://x.com/swyx README.md:76 Medium External URL 外部 URL
https://x.com/joshwoodward README.md:76 Medium External URL 外部 URL
https://x.com/kevinweil README.md:76 Medium External URL 外部 URL
https://x.com/petergyang README.md:76 Medium External URL 外部 URL
https://x.com/thenanyu README.md:76 Medium External URL 外部 URL
https://x.com/realmadhuguru README.md:76 Medium External URL 外部 URL
https://x.com/AmandaAskell README.md:76 Medium External URL 外部 URL
https://x.com/_catwu README.md:76 Medium External URL 外部 URL
https://x.com/trq212 README.md:76 Medium External URL 外部 URL
https://x.com/GoogleLabs README.md:76 Medium External URL 外部 URL
https://x.com/amasad README.md:76 Medium External URL 外部 URL
https://x.com/rauchg README.md:76 Medium External URL 外部 URL
https://x.com/alexalbert__ README.md:76 Medium External URL 外部 URL
https://x.com/levie README.md:76 Medium External URL 外部 URL
https://x.com/ryolu_ README.md:76 Medium External URL 外部 URL
https://x.com/garrytan README.md:76 Medium External URL 外部 URL
https://x.com/mattturck README.md:76 Medium External URL 外部 URL
https://x.com/zarazhangrui README.md:76 Medium External URL 外部 URL
https://x.com/nikunj README.md:76 Medium External URL 外部 URL
https://x.com/steipete README.md:76 Medium External URL 外部 URL
https://x.com/danshipper README.md:76 Medium External URL 外部 URL
https://x.com/adityaag README.md:76 Medium External URL 外部 URL
https://x.com/sama README.md:76 Medium External URL 外部 URL
https://x.com/claudeai README.md:76 Medium External URL 外部 URL
https://api.telegram.org/bot SKILL.md:100 Medium External URL 外部 URL
https://resend.com SKILL.md:108 Medium External URL 外部 URL
https://json-schema.org/draft/2020-12/schema config/config-schema.json:2 Medium External URL 外部 URL
https://www.youtube.com/@DataDrivenNYC/videos config/default-sources.json:30 Medium External URL 外部 URL
https://youtube.com/watch?v=example123 examples/sample-digest.md:22 Medium External URL 外部 URL
https://youtube.com/watch?v=example456 examples/sample-digest.md:34 Medium External URL 外部 URL
https://x.com/karpathy/status/example1 examples/sample-digest.md:44 Medium External URL 外部 URL
https://x.com/karpathy/status/example2 examples/sample-digest.md:45 Medium External URL 外部 URL
https://x.com/rauchg/status/example3 examples/sample-digest.md:51 Medium External URL 外部 URL
https://x.com/AmandaAskell/status/example4 examples/sample-digest.md:58 Medium External URL 外部 URL
https://t.co/nN6dKPZFlU feed-x.json:13 Medium External URL 外部 URL
https://x.com/swyx/status/2033382671687262371 feed-x.json:15 Medium External URL 外部 URL
https://t.co/oH3E8yH9Ta feed-x.json:24 Medium External URL 外部 URL
https://x.com/swyx/status/2033228801103298821 feed-x.json:26 Medium External URL 外部 URL
https://t.co/amD2XrwYAX feed-x.json:35 Medium External URL 外部 URL
https://x.com/swyx/status/2033047808648106402 feed-x.json:37 Medium External URL 外部 URL
https://t.co/CNBIiqoNQy feed-x.json:54 Medium External URL 外部 URL
https://x.com/kevinweil/status/2033286513904226568 feed-x.json:56 Medium External URL 外部 URL
https://t.co/XYKTmGVH14 feed-x.json:69 Medium External URL 外部 URL
https://t.co/yz9xcsfrhF feed-x.json:73 Medium External URL 外部 URL
https://x.com/petergyang/status/2033377805506089471 feed-x.json:75 Medium External URL 外部 URL
https://t.co/JGAiewlQKu\n\nhttps://t.co/4gzcz2rskP feed-x.json:84 Medium External URL 外部 URL
https://x.com/petergyang/status/2033336502827266421 feed-x.json:86 Medium External URL 外部 URL
https://t.co/4ft5AOqoG0 feed-x.json:95 Medium External URL 外部 URL
https://t.co/QaTXCl2kp9 feed-x.json:95 Medium External URL 外部 URL
https://x.com/petergyang/status/2033241918562513303 feed-x.json:97 Medium External URL 外部 URL
https://t.co/IUk5rBUmQ3\n\nHave feed-x.json:114 Medium External URL 外部 URL
https://x.com/thenanyu/status/2033292904395837834 feed-x.json:116 Medium External URL 外部 URL
https://t.co/iXsKSRwnmM feed-x.json:125 Medium External URL 外部 URL
https://x.com/thenanyu/status/2033145922339721456 feed-x.json:127 Medium External URL 外部 URL
https://t.co/GUgwcQyvr2 feed-x.json:144 Medium External URL 外部 URL
https://x.com/trq212/status/2033240602079563925 feed-x.json:146 Medium External URL 外部 URL
https://t.co/4TJapwxE98 feed-x.json:163 Medium External URL 外部 URL
https://x.com/amasad/status/2033356590984962178 feed-x.json:165 Medium External URL 外部 URL
https://t.co/ZZOvcOYm7s feed-x.json:174 Medium External URL 外部 URL
https://t.co/dHoJ0YaLlv feed-x.json:174 Medium External URL 外部 URL
https://x.com/amasad/status/2033349404787359900 feed-x.json:176 Medium External URL 外部 URL
https://t.co/oUJgbI869K feed-x.json:185 Medium External URL 外部 URL
https://x.com/amasad/status/2033103499840434607 feed-x.json:187 Medium External URL 外部 URL
https://t.co/QyADpyEA6r feed-x.json:204 Medium External URL 外部 URL
https://x.com/levie/status/2033332698404851860 feed-x.json:206 Medium External URL 外部 URL
https://t.co/7aoJjp1iIK—designer/engineer feed-x.json:219 Medium External URL 外部 URL
https://t.co/O8mR34zM5R feed-x.json:223 Medium External URL 外部 URL
https://x.com/garrytan/status/2033385188164542534 feed-x.json:225 Medium External URL 外部 URL
https://t.co/hF3vZUmEzw feed-x.json:234 Medium External URL 外部 URL
https://x.com/garrytan/status/2033333954598547872 feed-x.json:236 Medium External URL 外部 URL
https://x.com/mattturck/status/2033295813074690240 feed-x.json:255 Medium External URL 外部 URL
https://x.com/mattturck/status/2033293364360052946 feed-x.json:266 Medium External URL 外部 URL
https://t.co/8xzbGWtf6w feed-x.json:279 Medium External URL 外部 URL
https://t.co/dDPEWGiuBW feed-x.json:279 Medium External URL 外部 URL
https://t.co/7zY8IMvJSv feed-x.json:283 Medium External URL 外部 URL
https://x.com/zarazhangrui/status/2033355996731711743 feed-x.json:285 Medium External URL 外部 URL
https://x.com/zarazhangrui/status/2033231480806347248 feed-x.json:296 Medium External URL 外部 URL
https://t.co/HfQsDX0icN feed-x.json:305 Medium External URL 外部 URL
https://x.com/zarazhangrui/status/2033076228044067197 feed-x.json:307 Medium External URL 外部 URL
https://x.com/nikunj/status/2033393882646610218 feed-x.json:326 Medium External URL 外部 URL
https://x.com/nikunj/status/2033385092480168056 feed-x.json:337 Medium External URL 外部 URL
https://x.com/nikunj/status/2033226452272111787 feed-x.json:348 Medium External URL 外部 URL
https://t.co/76XGGCBWeE feed-x.json:365 Medium External URL 外部 URL
https://x.com/steipete/status/2033369381124935829 feed-x.json:367 Medium External URL 外部 URL
https://t.co/BXTylQcwrg feed-x.json:376 Medium External URL 外部 URL
https://x.com/steipete/status/2033231158146744582 feed-x.json:378 Medium External URL 外部 URL
https://t.co/eLoMM7zTNc feed-x.json:387 Medium External URL 外部 URL
https://x.com/steipete/status/2033220404555526154 feed-x.json:389 Medium External URL 外部 URL
https://x.com/danshipper/status/2033368834946768919 feed-x.json:408 Medium External URL 外部 URL
https://x.com/danshipper/status/2033214570412617933 feed-x.json:419 Medium External URL 外部 URL
https://x.com/danshipper/status/2033214127334670461 feed-x.json:430 Medium External URL 外部 URL
https://x.com/adityaag/status/2033184840435314858 feed-x.json:449 Medium External URL 外部 URL
https://youtube.com/watch?v=Iu4gEnZFQz8 prompts/digest-intro.md:36 Medium External URL 外部 URL
https://youtube.com/watch?v=xxx prompts/digest-intro.md:50 Medium External URL 外部 URL
https://x.com/levie/status/xxx prompts/digest-intro.md:51 Medium External URL 外部 URL
https://api.telegram.org/bot$ scripts/deliver.js:86 Medium External URL 外部 URL
https://api.resend.com/emails scripts/deliver.js:130 Medium External URL 外部 URL
https://api.supadata.ai/v1 scripts/fetch-content.js:36 Medium External URL 外部 URL
https://youtube.com/watch?v=$ scripts/fetch-content.js:214 Medium External URL 外部 URL
https://www.youtube.com/watch?v=$ scripts/fetch-content.js:237 Medium External URL 外部 URL
https://api.x.com/2 scripts/generate-feed.js:23 Medium External URL 外部 URL
https://dotenvx.com scripts/package-lock.json:24 Info Email 邮箱地址
[email protected] scripts/deliver.js:137 File Tree
20 files · 101.8 KB · 2774 lines JavaScript 4f · 1145L
Markdown 8f · 834L
JSON 7f · 743L
YAML 1f · 52L
├─
▾
.github
│ └─
▾
workflows
│ └─
generate-feed.yml
YAML
├─
▾
config
│ ├─
config-schema.json
JSON
│ └─
default-sources.json
JSON
├─
▾
examples
│ └─
sample-digest.md
Markdown
├─
▾
prompts
│ ├─
digest-intro.md
Markdown
│ ├─
summarize-podcast.md
Markdown
│ ├─
summarize-tweets.md
Markdown
│ └─
translate.md
Markdown
├─
▾
scripts
│ ├─
deliver.js
JavaScript
│ ├─
fetch-content.js
JavaScript
│ ├─
generate-feed.js
JavaScript
│ ├─
package-lock.json
JSON
│ ├─
package.json
JSON
│ └─
prepare-digest.js
JavaScript
├─
feed-podcasts.json
JSON
├─
feed-x.json
JSON
├─
README.md
Markdown
├─
README.zh-CN.md
Markdown
├─
SKILL.md
Markdown
└─
state-feed.json
JSON
Dependencies 2 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
dotenv | ^16.4.0 | npm | No | Pinned to major.minor — minor version flexibility is acceptable |
proper-lockfile | ^4.1.0 | npm | No | Pinned to major.minor — used for state file locking |
Security Positives
✓ All network calls go to legitimate, documented APIs (Supadata, Telegram, Resend, GitHub) — no direct IP connections or suspicious endpoints
✓ API keys (TELEGRAM_BOT_TOKEN, RESEND_API_KEY, SUPADATA_API_KEY) are used only for their intended services and never exfiltrated
✓ All shell commands (bash heredocs for config, crontab, node execution) are fully documented in SKILL.md
✓ No obfuscation (base64, eval, atob) detected in any script
✓ No access to sensitive paths like ~/.ssh, ~/.aws, or .env containing other credentials
✓ File writes are scoped to ~/.follow-builders/ — user-controlled directory, not system-wide
✓ No credential harvesting from os.environ iteration — only specific keys are read from .env
✓ Proper-lockfile prevents state file corruption from concurrent runs
✓ State file prunes old entries (90 days) to prevent unbounded growth
✓ No supply chain risks: dependencies (dotenv, proper-lockfile) are well-known, popular packages with reasonable version pinning