Skip to content
cccskills
FreePublished on GitHubEnglish overview

SecurityUpdates

Collect security news, research, and ideas from six configured sources, then rank and deduplicate the results into a digest of up to 32 items. Run state tracks previously shown stories so recurring coverage is filtered from later updates.

OriginalShow the original description

Aggregates and curates security news from six authoritative sources into a ranked, deduplicated digest across Security News, Research, and Ideas, with stateful tracking to avoid re-surfacing seen items. USE WHEN security news, security updates, breaches, sec updates, tldrsec, Krebs, Schneier, weekly security digest, CISO strategy. NOT FOR stack-specific CVE prioritization against your own tech stack (use your own vulnerability-management tooling), or AI industry news (Upgrade NewsDigest).

danielmiessler/LifeOS19,635 stars(GitHub 19,635 + cccskills 0)

Run score Not tested

See how to install

Good for

  • Get a digest of recent security news
  • Review new security research and ideas
  • Run a weekly security update
  • Avoid seeing stories already covered

Overview

What it does

SecurityUpdates gathers security news, research, and ideas from six configured sources and combines duplicate coverage into a digest of up to 32 items. Items are grouped into categories and ranked by importance within each category, with their sources identified. After a successful run, it records the items shown in a state file. Later runs use that record to filter out previously shown stories, making new developments easier to spot. Settings can add sources or specify topics to emphasize.

When it helps

Use it to follow developments across the security industry or review key points without visiting several news sites one by one. The categories also help when you want to read news reporting separately from new research.

Example requests

  • “Summarize recent security news.”
  • “Make a digest of this week’s security developments.”
  • “/secupdates”

Notes

You can adjust sources and topics in settings. This skill does not prioritize CVEs against your organization’s specific technology stack.

This overview was written by AI (OpenAI Codex) from the public SKILL.md. Check the original below for the exact behavior.

Document check

AI checked the SKILL.md for operations that need care and for setup requirements. The score comes only from actually running the skill (hands-on test).

SafetyAre sending data, deleting files, and running commands disclosed?
AGoodIt reads external sources, cites them, and records state after a successful run.
Easy setupDoes it need few tools or API keys, and are they documented?
AGoodIt proceeds with six defaults when preferences are absent; accounts are listed as none.

Not counted in the score. Rated by AI (OpenAI Codex) as of Oct 28, 2026. Treat it as a guide and read the original before installing.

Disagree? Request a re-evaluation

Tell us which point is wrong and why. No login needed. We will check it against the SKILL.md, redo the evaluation, and show the result here.

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

Files included (6)

  • SKILL.md4.3 KB
  • Intents/Update.md5.4 KB
  • Setup.md2.2 KB
  • sources.json2.0 KB
  • Tools/Digest.help.md1.5 KB
  • Tools/Digest.ts10.6 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

SecurityUpdates

Aggregates security news from six authoritative sources (§ Sources) into a ranked, deduplicated digest of up to 32 items across three categories: Security News, Security Research, and Security Ideas. A per-item record of what each run showed, kept in last-check.json by Tools/Digest.ts, avoids re-surfacing seen items, so a weekly run shows only what is new instead of the overlapping stories six sites publish on their own cadences.

Ideal State

  • A run returns at most 32 items, deduplicated across sources, ranked within News, Research and Ideas, each attributed to its source, and none fabricated.
  • Nothing surfaced on an earlier run surfaces again, dated or not: every shown item's key is recorded in MEMORY/STATE/SecurityUpdates-last-check.json after each successful run, and the next run's candidates are filtered against it by Tools/Digest.ts (Intents/Update.md § Tool contract).
  • Items come only from the configured sources: the six defaults in sources.json, swapped or extended through PREFERENCES.md.

Intent Routing

IntentTriggerFile
Update"security updates", "sec updates", "/secupdates", "what's new in security"Intents/Update.md

Default: Run the Update intent.

FileRead when
Setup.mdfirst-time setup: the smallest working PREFERENCES.md, accounts (none) and the proof command
Tools/Digest.help.mdthe state filter, recorder and digest check the Update intent runs

Data & Config

User customizations, read before each run: <configRoot>/LIFEOS/USER/CUSTOMIZATIONS/SKILLS/SecurityUpdates/PREFERENCES.md configRoot is $CLAUDE_CONFIG_DIR when set, else ~/.claude.

If the file exists, apply it: it can add sources and say which topics to emphasise or drop, and it overrides default behavior (the 32-item cap and the three categories stay). If it does not exist, proceed with the six default sources; nothing here is required. Setup, a smallest working PREFERENCES.md and the proof command are in Setup.md. Run state is not config: it is written to MEMORY/STATE/SecurityUpdates-last-check.json (shape in Intents/Update.md § Tool contract).

Sources

sources.json in the skill root is the one list of the six default sources: id, name, URL, type, and the categories each one feeds.

Custom sources: list them under "Extra sources" in PREFERENCES.md (see Data & Config); sources.json in the skill root holds the six defaults and is overwritten by updates, so do not edit it.

Gotchas

  • Not for stack-specific CVE tracking: use your own vulnerability-management tooling for that (a private overlay skill routes those requests on its own triggers). SecurityUpdates is for industry-wide security news.
  • Research publications vs news: Distinguish between new research papers and news reporting. Cite appropriately.

Examples

"What's new in security?" → Update intent → a ranked ≤32-item digest of what is new across all six sources since ~/.claude/LIFEOS/MEMORY/STATE/SecurityUpdates-last-check.json was last written, and that state file updated for the next run.

"/secupdates" → same Update intent, slash-command entry.

Second run same day → only items whose keys are not already in the state file surface; an empty digest with "no new items since last check" is the correct result, not a failure.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

AnnualReports

FreeSummary

Find and fetch vendor cybersecurity reports, then compare their findings on topics such as ransomware, breaches, cloud security, and AI. Analyses identify the reports consulted and cite each figure by vendor, year, and report, including where sources disagree.

  • Find reports in a cybersecurity topic area
  • Fetch a specific vendor report
  • Compare ransomware findings across reports
danielmiessler/LifeOS19.6KUpdated Oct 28, 2026

Compare a component's own design needs with the goals of the larger system through three structured passes. The result identifies conflicts, recommends an appropriate scope, and assesses whether the proposed design fits the whole.

  • Choosing between a service, a library, and inline code
  • Comparing feature requests with product goals
  • Checking how new components fit an existing system
danielmiessler/LifeOS19.6KUpdated Oct 28, 2026

Aphorisms

FreeSummary

Find quotes that fit a text’s themes, with attribution and a short reason for each suggestion. Add sourced quotes, research thinkers, and organize a quote collection by theme and usage history to avoid repetition.

  • Finding a fitting quote for a newsletter
  • Saving sourced quotes without duplicates
  • Researching a thinker’s quotes by theme
danielmiessler/LifeOS19.6KUpdated Oct 28, 2026

Art

FreeSummary

Create blog illustrations, technical diagrams, comparisons, comics, and icons through workflows tailored to each format. The skill guides composition, color, and model selection, then stages generated images for review before they are used in a project.

  • Creating blog header illustrations
  • Explaining a system with a technical diagram
  • Visualizing comparisons and timelines
danielmiessler/LifeOS19.6KUpdated Oct 28, 2026

ArtDirection

FreeSummary

Assess the visual quality of images, films, slides, and site captures against a brief and craft criteria. Two vision judges score the work and rank defects, guiding bounded revision; delivery is gated on a passing critique, with human calibration labels recorded separately.

  • Reviewing a render and listing the most important visual defects
  • Iterating on a film or slide deck until it meets a defined bar
  • Checking whether an image reads as professional
danielmiessler/LifeOS19.6KUpdated Oct 28, 2026

ArXiv

FreeSummary

Find arXiv papers by topic, research category, or paper ID. Retrieve titles, authors, abstracts, and links, check new submissions, and add AlphaXiv's AI-generated overviews when available to help decide which papers to read.

  • Checking new AI and machine learning papers
  • Finding papers on a specific research topic
  • Looking up a paper by its ID or arXiv URL
danielmiessler/LifeOS19.6KUpdated Oct 28, 2026

See all skills by danielmiessler

Report a problem with this skill