An automated security digest tool for Openclaw that fetches RSS feeds, enriches items with CVE data, and publishes drafts to Ghost CMS.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-rss-feeds
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-rss-feeds using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is OpenClaw RSS Feeds?
The openclaw-rss-feeds skill is a specialized automation tool designed for security researchers and content creators. It streamlines the collection of security advisories by monitoring RSS and Atom feeds, filtering content based on specific keywords, and automatically enriching entries with live NVD CVE data including CVSS scores and technical descriptions. This Openclaw Skills plugin acts as a bridge between high-frequency security intelligence and structured content publishing.
By integrating directly with Ghost CMS, it creates professionally formatted drafts for manual review or immediate distribution. Beyond CMS integration, it supports multi-channel notifications through platforms like Telegram, Discord, and WhatsApp, ensuring your team is alerted to high-priority vulnerabilities as they are detected without manual monitoring.
OpenClaw RSS Feeds Use Cases
- Monitoring vendor PSIRT feeds from companies like Fortinet or Microsoft for specific product vulnerabilities.
- Generating automated weekly or monthly security newsletters for internal teams or public blogs.
- Setting up real-time alerts for critical CVEs that exceed a specific CVSS threshold (e.g., 7.0+).
- Aggregating intelligence from national agencies like BSI CERT-Bund into a centralized digital marketing workflow.
How OpenClaw RSS Feeds Works
- The plugin initiates a run either via a configured cron schedule or a manual call to the rss_run_digest tool.
- It connects to the defined list of RSS or Atom feed URLs and fetches entries published within the specified lookback window.
- Content is filtered using keyword matching to ensure only relevant security advisories are processed.
- For feeds with enrichment enabled, the skill queries the NVD API to retrieve detailed CVE IDs, CVSS scores, and impact descriptions.
- The tool assembles a structured HTML digest, merging tags from various feeds for organizational clarity.
- The final digest is pushed to the Ghost CMS Admin API as a draft post and summary alerts are sent to configured notification channels.
OpenClaw RSS Feeds Setup
To install the skill, run the following command in your terminal:
npm install @elvatis_com/openclaw-rss-feeds
After installation, enable the plugin in your OpenClaw configuration file and define your feeds, Ghost API credentials, and notification targets in the plugin schema.
OpenClaw RSS Feeds Data Schema & Taxonomy
The skill utilizes a structured configuration schema to manage its data flow:
| Component | Description |
|---|---|
| feeds | Array of objects defining source URLs, keywords, and enrichment settings. |
| ghost | Contains the CMS URL and the Admin API Key for draft creation. |
| notify | A list of connection strings for various platforms (e.g., telegram:ID, whatsapp:phone). |
| schedule | A standard cron string defining the frequency of automated runs. |
| cvssThreshold | Numeric filter to only include vulnerabilities of a certain severity. |
OpenClaw RSS Feeds Advanced Features
- CVSS Threshold Filtering: Automatically discard low-impact vulnerabilities to reduce noise in your digests.
- Custom Documentation Templates: Generate dynamic links to vendor-specific release notes using product and version placeholders.
- Dry Run Mode: Test your feed configurations and formatting via the rss_run_digest tool without triggering external API writes.
- Rate-Limited NVD Lookups: Built-in handling for API rate limits to ensure reliable CVE enrichment during high-volume advisory periods.
SKILL.md
Loading
Related Openclaw Skills
OpenClaw Ops (Elvatis)
A comprehensive operational toolkit for managing, monitoring, and validating OpenClaw deployments and configurations.
OpenClaw Model Failover Plugin
A gateway-level plugin that automatically switches to fallback LLM models when primary APIs hit rate limits or encounter quota errors.
OpenClaw Memory Docs
A local-first, audit-friendly memory store plugin for OpenClaw that provides explicit control over documentation capture and semantic search.
Openclaw Memory Core
A high-performance utility library providing privacy-first redaction, local JSONL storage, and offline text embeddings for AI memory management.
Self-Healing Elvatis for OpenClaw
An automated recovery extension that detects and fixes session failures, rate limits, and disconnects for AI agents.
Openclaw Todo
A specialized plugin for managing task lists within markdown files using intuitive CLI commands and metadata markers.