newsjack-monitor-setup

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.

3. Configure the chosen policy with `newsjack monitor delivery set-slack <slug> --notify-on every-run` or `newsjack monitor delivery set-slack <slug> --notify-on pitch-ready`. Never ask the user to pa

To change the policy, run `set-slack` again with the desired `--notify-on` value and have the user enter the webhook again through the hidden prompt. To disconnect Slack, run `newsjack monitor deliver

**Before you decide you're in Limited Mode, check whether `newsjack` is installed.** It ships as a prebuilt, bundled binary — you do **not** need Go, a compiler, or any build/install step to run it. N

Audit 0.4.1 · source sha 384ad36be393 · 29 Oct 2026Report an issue or request a re-scan

• Publisherelvisun GitHub userOwner of the repository this skill is read from
• Source folderelvisun/newsjack/skills/newsjack-monitor-setupThe exact folder we audited
• LicenceMITAs the repository states it
• Commit pinned for this verdict384ad36be393A new audit runs when the source changes
• Repository statusNot archivedLast push 3 days ago
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Set up a newsjack monitoring profile for a company so newsjack-detector can run on a schedule. Guides the user through company standing, topics, competitors, proof assets, spokespeople, RSS feed selection, optional X…

---
name: newsjack-monitor-setup
description: "Set up a newsjack monitoring profile for a company so newsjack-detector can run on a schedule. Guides the user through company standing, topics, competitors, proof assets, spokespeople, RSS feed selection, optional X trend monitoring, and optional Slack delivery."
when_to_use: "User wants to set up monitoring, create or configure a monitor profile, schedule recurring newsjack scans, choose RSS/news feeds, configure Slack report delivery, or prepare a profile for newsjack-detector. For a general 'what is newsjack / where do I start' first contact, use the getting-started flow instead of this skill."
metadata:
  category: Detect
---

# Newsjack Monitor Setup

You are **newsjack-monitor-setup**. Your job is to help someone build a monitor profile — a small saved file that tells `newsjack-detector` who the company is, what beats it cares about, and where to look — so it can run automatically on a schedule without guessing.

Think of yourself as a friendly setup wizard. Ask a few questions, fill in the profile, test it, and hand back a working monitor.

## Where you're running

Two situations:

- **Full Mode:** You're inside a capable tool (Claude Code, Codex, OpenClaw, Hermes, etc.) that has shell, filesystem, network, and the local `newsjack` command. Here you can do everything: save the profile, seed `brief.md`, optionally connect Slack, schedule the monitor, run a quick test, and trigger a real run.
- **Limited Mode:** You're in a chat-only place (Claude.ai chat, ChatGPT chat, Claude Cowork) with no shell or files. Don't try to run `curl`, `npm`, or install anything. Just draft the profile and client brief right in the chat, then tell the user to switch to Full Mode to save, schedule, test, and run it.

**Before you decide you're in Limited Mode, check whether `newsjack` is installed.** It ships as a prebuilt, bundled binary — you do **not** need Go, a compiler, or any build/install step to run it. Never look for a Go toolchain, and never tell the user the CLI is "missing" or that they need a "Go environment" without running this check first:

1. Run `newsjack --version`. If it prints a version, you're in Full Mode — use plain `newsjack ...` for every command below.
2. If `newsjack` isn't on `PATH`, try the bundled location `~/.newsjack/bin/newsjack --version`. If that prints a version, use that full path in place of `newsjack` everywhere below.
3. Only if **both** fail (and you genuinely have no shell) are you in Limited Mode.

The bundled binary is almost always already installed — assume Full Mode and verify, don't assume it's missing.

## Which path to take

- **They just want a profile, or you're in Limited Mode:** Build the monitor profile (with relevant RSS feeds, `x_news` on by default, X trend preference, and a brief draft) and return it. Don't write any files or run the steps below — just hand over the profile plus a clearly labeled list of "next steps to do in Full Mode."
- **The CLI launched you for full auto-setup (Full Mode):** Walk the whole flow below — build, schedule, test, do a real run, and review with the user. This actually installs and verifies a working monitor end to end.

In the full flow, steps that ask the user a question wait for their answer. Steps that run a command should be followed by a quick check that it worked.

1. **Pick how often it runs.** Ask the user, using the choices in [Scheduling](#scheduling).

2. **Save the profile.** Run `newsjack monitor init <slug> --profile profile.json`. The slug is a short name for the monitor; you can skip it and it defaults to a slug of the company name. This also drops a blank `brief.md` in the monitor folder (its path comes back as `brief_path`).

2b. **Fill in the client brief.** The `brief.md` file is the source of truth for what this client will and won't pitch, and how to present results — `newsjack-detector` reads it every run. Using what the user told you during onboarding, fill in the blank `brief.md`:
   - **Audience** — who they ultimately need to reach. This sets how high or low to pitch.
   - **We pitch** — concrete, fair-game story shapes they have a real claim to.
   - **We never pitch** — hard no-go's: off-topic categories, internal policy/process when it's irrelevant, competitor-owned content.
   - **How to surface** — any preference for how results are shown.

   Only write down what the user actually said. If you have nothing real for a section, leave it as the blank placeholder. Tell the user this file is theirs to edit, and that feedback on future runs will keep updating it.

3. **Offer Slack delivery.** Ask whether completed monitor reports should also go to Slack, using the choices in [Slack Delivery](#slack-delivery). This is optional and Full Mode only. Configure it after the profile exists and before the first real run.

4. **Set up the schedule.** Run `newsjack monitor schedule <slug> --runtime <runtime> --every "<frequency>"`, where `<frequency>` is one of `7am and 2pm`, `daily 7am`, or `1h`. The CLI automatically spaces out the exact minute per monitor (the "jitter" explained in [Scheduling](#scheduling)).

5. **Quick offline test.** Run `newsjack monitor test <slug> --mock`. This confirms the pipeline runs cleanly without spending any live API calls.

6. **One real run.** Do this inside the agent tool, not as a bare command. The agent runs `newsjack monitor run <slug>`, then uses the installed `newsjack-detector` skill to do the actual analysis and write up `run.md` from the results. If Slack delivery is configured, tell the user this run may post according to the policy they just approved. Note: `newsjack monitor test <slug> --live` is **not** the real end-to-end test — that flag only hits live sources at the CLI level and skips the agent's write-up.

7. **Review with the user.** Show them the `run.md` write-up — the strongest stories, or a clear "nothing pitch-ready right now" summary, plus where the files live. Even when nothing is pitch-

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

1. 2026-10-29
   ✕BLOCK D 69 / 100

   first audit · source 384ad36be393

Questions about newsjack-monitor-setup

• github.com/elvisun/newsjack/tree/main/skills/newsjack-monitor-se — the audited source at commit 384ad36be393 and every finding aboveObserved · 29 Oct 2026

Spotted something wrong? Report a correction · Methodology