last30days-skill is an AI-agent research tool that searches sources including Reddit, X, YouTube, Hacker News, Polymarket, and the web, then combines the results into a short summary. People use it to investigate current topics using signals such as engagement, transcripts, and market odds; the catalogue entries define how supported coding agents run the research workflow.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/mvanhorn/last30days-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/mvanhorn/last30days-skill/gemini-extension)<a href="https://agentmods.dev/plugins/mvanhorn/last30days-skill/gemini-extension"><img src="https://agentmods.dev/badge/plugins/mvanhorn/last30days-skill/gemini-extension.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
last30days-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 68 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "last30days-skill",
"version": "3.23.0",
"description": "Research a topic from the last 30 days across Reddit, X, YouTube, TikTok, Instagram, Hacker News, Polymarket, and the web.",
"settings": [
{
"name": "Extension Directory",
"description": "Extension installation directory (auto-set by Gemini CLI)",
"envVar": "GEMINI_EXTENSION_DIR",
"sensitive": false
},
{
"name": "ScrapeCreators API Key",
"description": "ScrapeCreators API Key for Reddit, TikTok, and Instagram search (required)",
"envVar": "SCRAPECREATORS_API_KEY",
"sensitive": true
},
{
"name": "OpenAI API Key",
"description": "OpenAI API Key - optional fallback for Reddit discovery",
"envVar": "OPENAI_API_KEY",
"sensitive": true
},
{
"name": "xAI API Key",
"description": "xAI API Key for X/Twitter search (optional)",
"envVar": "XAI_API_KEY",
"sensitive": true
},
{
"name": "OpenRouter API Key",
"description": "OpenRouter API Key (optional)",
"envVar": "OPENROUTER_API_KEY",
"sensitive": true
},
{
"name": "Parallel AI API Key",
"description": "Parallel AI API Key (optional)",
"envVar": "PARALLEL_API_KEY",
"sensitive": true
},
{
"name": "Brave Search API Key",
"description": "Brave Search API Key (optional)",
"envVar": "BRAVE_API_KEY",
"sensitive": true
},
{
"name": "Apify API Token",
"description": "Apify API Token (optional legacy)",
"envVar": "APIFY_API_TOKEN",
"sensitive": true
},
{
"name": "Twitter AUTH_TOKEN",
"description": "Twitter browser AUTH_TOKEN cookie for direct X search (optional)",
"envVar": "AUTH_TOKEN",
"sensitive": true
},
{
"name": "Twitter CT0",
"description": "Twitter browser CT0 cookie (optional, pair with AUTH_TOKEN)",
"envVar": "CT0",
"sensitive": true
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 68 lines scan A bd1d110baf64
last30days-skill is a plugin published in the GitHub repository mvanhorn/last30days-skill (61,473 stars, last pushed today), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other plugins, from other repositories
unabatedpm-business-building
AI coaching skills for PM business acumen — metrics design, unit economics, P&L translation, business models, and ROI modeling. Each skill coaches you through the thinking with scoring rubrics, real coaching exchanges, and pushback on weak reasoning.
unabatedpm-career-growth
AI coaching skills for PM career development — resume design, job search strategy, interview coaching, career transitions, confidence building, negotiation, and navigating AI's impact on the profession. Each skill coaches you through real frameworks with scoring rubrics, persona archetypes, and pushback on generic…
unabatedpm-strategic-thinking
AI coaching skills for PM strategic thinking — role clarity, vision synthesis, strategy articulation, and stakeholder management. Each skill coaches you through the thinking with scoring rubrics, real coaching exchanges, and pushback on weak reasoning.
jury
Jury v0.1.0 — standalone cross-family cascade-then-jury reviewer (Gemini + GPT small-fish → cross-family tiebreaker). The free 'jury beats judge' base; codi and super-developer depend on it optionally for cross-family verification. No API keys (OAuth local CLIs).
reddit-business-research
Research what Reddit says about your business, competitors, and industry. Searches posts, analyzes sentiment, and generates actionable reports.
nextjs
Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.