Install
$ agentstack add skill-lukethecat-aperture-aperture ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Skill: Aperture
> TL;DR — A skill for AI agents that want to produce better daily reports and discover more of what their users actually want. Aperture scans source front pages, diffs them against yesterday, prescreens with a weighted profile, reviews with an LLM, deduplicates, publishes, and evolves the profile from user feedback. All decisions go to an append-only tape.
This skill is implementation-agnostic. An agent can execute it by reading this file, by calling the included Python reference implementation, or by porting the patterns to its own runtime.
1. Purpose
Give agents a deterministic, auditable news-curation skill that replaces static RSS readers and one-shot LLM summarizers:
- Scan the front page — treat "reading the front page" as a first-class operation, not just feed polling.
- Tape every decision — record every source snapshot, item, rejection reason, profile version, and report in an append-only log for audit and replay.
- Learn from user feedback — update the agent's taste through explicit feedback and keep every change versioned and reversible.
When an agent runs this skill, it can answer "why was this selected?" and "what would have been different yesterday?" from the tape.
2. Core concepts
| Concept | Meaning | |---------|---------| | Vertical | A configured news beat (e.g. tech, auto, AI policy). Each vertical has its own sources, profile, and tape. | | Tape | Append-only JSONL log. One file per vertical. Every source snapshot, item, profile version, feedback, and report is a record. | | Profile | The vertical's "taste": weighted keywords, categories with bonuses, and negative terms. Versioned; every change is logged. | | Scan | Fetch each source's list page, extract titles/links, normalize URLs, diff against the previous snapshot. | | Reflection loop | User feedback → parsed profile operations → version bump → evolution record → recheck recently pooled items. |
3. Four-stage pipeline
┌─────────┐ ┌──────────┐ ┌─────────┐ ┌──────────┐
│ collect │ -> │ edit │ -> │ review │ -> │ publish │
│ (scan) │ │(prescreen│ │ (LLM) │ │ (dedup + │
│ │ │ rules) │ │ │ │ report) │
└─────────┘ └──────────┘ └─────────┘ └──────────┘
│ │ │ │
└───────────────┴───────────────┴───────────────┘
│
append-only TAPE
3.1 Collect — scan the front page
Goal: produce today's candidate items from each configured source.
Steps:
- For each source, fetch
list_url. - Extract
{title, url}pairs using the source'sextract_profile:
rss— parse `` blocks.generic_links— parse `` tags.regex— apply a regex with named groups for title/url/date.json_api— navigate a JSON path and read title/url keys.
- Normalize every URL:
- Drop fragments and tracking parameters (
utm_*,fbclid, etc.). - Strip trailing slash and leading
www.. - Force
httpsscheme, lowercase host.
- Diff against the previous frontpage snapshot for this source (read from tape).
- New
url_normvalues become candidates. - Save the full current snapshot as a new
frontpagetape record.
- Update source health:
- Success → reset
fail_count. - Failure → increment
fail_count; alert if ≥ 3 consecutive failures.
Why diff against the frontpage instead of parsing publish dates? Because many sources have unreliable timestamps or anti-scraping layouts. "New on the front page" is a robust proxy for "news in today's window".
Time-window guard (deterministic, not LLM): For pull sources that do expose pubDate (RSS/Atom), the scanner applies a hard cutoff before diffing. Default window is 36 hours; override with extract_profile.window_hours. Items older than the window are dropped. Items with missing or unparseable dates are excluded by default (missing_date_policy: exclude) because a date the engine cannot verify is a date it cannot trust. Set missing_date_policy: include only for sources where dates are known to be unreliable and frontpage diff is the primary signal.
This rule exists because date-window enforcement is bookkeeping, not judgment. It must be deterministic and auditable — never delegated to an LLM, which is prone to misreading dates and mixing stale stories into today's report.
3.2 Edit — prescreen with the profile
Goal: score candidates with cheap rules; keep the wide funnel.
Formula:
score = sum(matched keyword weights)
+ sum(category match bonuses)
- sum(matched negative weights)
Steps:
- Load the vertical's latest profile.
- For each candidate title:
- Match keywords and categories (whole-word boundary for ASCII terms).
- Subtract negatives.
- Record
last_hitfor any matched term.
- Threshold: default
score >= 2passes; lower scores are rejected withreject_reason: low_score. - Write every candidate to the tape as an
itemrecord:
- Passed →
stage: prescreened. - Rejected →
stage: rejected, withreject_reason.
> Rejected items are the fuel for calibration. Never delete them.
3.3 Review — structured second pass
Goal: verify that prescreened items are real news, on-topic, and not ads/jobs.
Steps:
- Sort prescreened items by score (descending).
- Cap per-source representation (e.g. max 4 per source) to avoid monopoly.
- For each item, fetch article text (first ~1000 chars) and extract a publish date via a fallback chain:
- JSON-LD
datePublished - ``
- Send a batch prompt to the configured LLM provider. Ask for each item:
is_news— not ad/job/announcementis_ad,is_job— disqualifiersvertical_fit— 0 to 1 relevance scoresummary— 2-3 sentence summary
- Apply rejection reasons:
not_news,is_ad,is_job,low_fit.
- Write results to the tape as
itemrecords withstage: verifiedorstage: rejected.
If no LLM provider is configured: the pipeline runs in --dry rule-only mode and promotes prescreened items directly.
3.4 Publish — deduplicate and report
Goal: collapse duplicates and produce a readable daily report.
Steps:
- Load recently pooled items (last 14 days, excluding today).
- Two-level dedup for verified items:
- Exact
url_normmatch → skip. - Title
simhashwith hamming distance ≤ 3 → same event; group into a cluster.
- For each cluster, pick the highest-scored item as the main item; others become related sources.
- Sort clusters by source count and score.
- Format the report. Append a status footer:
- sources scanned, items prescreened, rejected, pooled, report item count
- source health alerts
- stage timings
- Write a
reportrecord to the tape.
4. Reflection loop (self-evolution)
Trigger: user reads a report and gives feedback, e.g.
> "More AI safety stories, fewer sponsored posts, and keep an eye on EU regulation."
Steps:
- Parse feedback into profile operations:
add_keyword: {term, weight}adjust_weight: {term, delta}remove_keyword: {term}add_negative: {term, weight}adjust_negative_weight: {term, delta}remove_negative: {term}
- Apply operations to the profile; bump version.
- Write an
evolutiontape record containing the operations and original feedback text. - Recheck recently pooled items (last 7 days) against the new negatives/lowered weights.
- If any would now be filtered, report the count to the user.
- Return a confirmation summary.
Decay rule (weekly):
origin: learnedterms that have not hit for 30 days lose 1 weight.- Weight 0 → move to a pending-delete list; ask user before removing.
origin: manualterms never auto-delete, only warn.
5. Source-acquisition taxonomy
A source can be acquired in five ways. The engine treats them uniformly once they reach the tape. The report's source registry renders each source as status [name](url) · method so a reader can see at a glance how the source is acquired.
| Type | Mechanism | When to use | Registry display | |------|-----------|-------------|------------------| | pull | RSS/API/curl on cron | Stable feeds and APIs | 🟢 [Hacker News](https://news.ycombinator.com/rss) · pull | | scan | Frontpage diff + prescreen | SPAs, irregular sites | 🟢 [TechCrunch](https://techcrunch.com) · scan | | push | Webhook/SSE/bridge | Internal alerts or closed ecosystems | 🟢 [Internal Alerts](...) · push | | search | Ad-hoc search | New-source discovery or major-event catch-up | 🟢 [Search](...) · search | | human-feed | User drops a link | Exclusive tips and first-hand signals | 🟢 Weixin Tip · human-feed |
Add a source by registering {id, name, list_url, extract_profile} in the vertical config. A human-feed source sets extract_profile = { method = "human_feed" } and may omit list_url.
Agent-facilitated human-feed
A useful variant is agent-facilitated human-feed: the agent itself performs a platform search (e.g. on X for posts under an AI hashtag in the last 24–36 hours), curates ≥1 candidate, and injects it through the human-feed channel. The injected item still goes through the same prescreen, review, and dedup stages as pull/scan items — human-feed guarantees entry into the candidate pool, not a free pass into the report.
"Never stop at the message"
A social-media post, headline, or tip is a signal, not a citation. Every injected item must resolve to the original article URL before it reaches the tape. If the agent can only find a post URL, scripts/x_hunt.py attempts a best-effort search for the original article; if that fails, the candidate is dropped and the reason is recorded on the tape. The published report never points readers at a post or headline as the final source.
Reference implementation (scripts/x_hunt.py)
scripts/x_hunt.py is deterministic bookkeeping: it writes an already-curated item to the tape. The search, read, and selection are the agent's judgment work, performed with the agent's own WebSearch/tools.
# Preferred path: agent has already resolved the headline to the original article URL.
python scripts/x_hunt.py --vertical ai-frontier --source-id ainativef_zh \
--title "OpenAI announces GPT-5" \
--url "https://openai.com/blog/introducing-gpt-5" \
--inject
# If only an X post URL is available, the script tries to resolve the original URL.
python scripts/x_hunt.py --vertical ai-frontier --source-id ainativef_zh \
--title "OpenAI announces GPT-5" \
--url "https://x.com/OpenAI/status/1234567890" \
--inject
# Best-effort automated search fallback (often blocked; use sparingly).
python scripts/x_hunt.py --vertical ai-frontier \
--query "AI artificial intelligence site:x.com" --inject
# Review search fallback candidates without injecting
python scripts/x_hunt.py --vertical ai-frontier \
--query "AI artificial intelligence site:x.com"
The injected record is written to the tape as an item with:
source_id: the registered source id (defaultowner_tips).stage:scanned— it enters the pipeline at prescreen.facilitated_by:agent— auditable provenance.
Dropped records (unresolvable post URLs, off-topic candidates, etc.) are also appended to the tape with stage: dropped and a drop_reason, so the audit trail includes what did not make it.
Separation of concerns: judgment (search/read/select/origin-resolution) belongs to the agent; bookkeeping (normalize URL, allocate id, append to tape) belongs to the script. This keeps the skill deterministic and leaves platform-specific retrieval strategies to the agent's own capabilities.
This mode turns the platform from a passive content source into an active source-discovery hunt: when the agent repeatedly finds good stories from the same outlet, ECHO can ask "Add '' as a tracked source?" and, on yes, promote the outlet to a formal pull/scan source. That closed loop is the skill's self-evolution in action.
6. Tape record types
Each tape line is a JSON object with a type field.
| type | fields | |------|--------| | source | id, name, vertical, list_url, extract_profile, health | | frontpage | source_id, date, items[], count | | profile | vertical, version, keywords[], negatives[], categories[], reason | | item | id, vertical, source_id, title, url, url_norm, stage, scores, reject_reason, simhash, cluster_id | | report | date, vertical, item_ids[], generated_at, stats | | feedback | date, vertical, text, applied_ops[], status | | evolution | vertical, from_version, to_version, ops[], reason, date |
7. Running the reference implementation
# Rule-only dry run (no LLM required)
python -m engine.pipeline --dry --vertical tech --config config/example_vertical.toml
# With LLM review
export APERTURE_LLM_API_KEY="sk-..."
python -m engine.pipeline --vertical tech --config config/example_vertical.toml
# Apply feedback
python -c "from engine.feedback import apply_feedback; apply_feedback('More AI safety, fewer ads', 'tech')"
After publishing, optionally run ECHO to ask the user up to two clarification questions:
from engine.echo import ask
questions = ask("tech")
for q in questions:
print(q["question"])
# Later, apply a one-word answer: yes / no / skip / silence
from engine.echo import apply_answer
apply_answer(question_id, "tech", "yes")
8. ECHO — proactive clarification
ECHO is an optional proactive layer that asks the user up to two one-word clarification questions after each report. It turns passive readers into active profile trainers.
ECHO is intentionally split into four stages with the tape as the boundary between each. This makes delivery failures safe to retry and makes the whole loop auditable.
Four-stage flow
┌─────────┐ ┌──────────┐ ┌─────────┐ ┌──────────┐
│ prepare │ → │ deliver │ → │ ingest │ → │ distill │
│(generate│ │(post to │ │(record │ │(apply to │
│ questions│ │ channel) │ │ answer) │ │ profile) │
└────┬────┘ └────┬─────┘ └────┬────┘ └────┬─────┘
│ │ │ │
└─────────────┴──────────────┴─────────────┘
append-only TAPE
- prepare — after
publish, generate today's clarification questions from
the pooled items and write them to the tape as echo_question records with status: pending. Expire any unanswered questions from the previous day first. Human-feed items additionally trigger a source-proposal question: "Add '' as a tracked source?" The question is generated from today's human-feed items on the tape regardless of whether the item survived prescreen — the question is about the source, not the item's score. If the sample URL is on mp.weixin.qq.com, the question notes that Weixin is a closed platform and that expansion research is needed. A positive answer records a source_proposal tape entry; it does not automatically register the source (owner confirmation is required).
- deliver — the cron/delivery layer reads pending questions, posts them
alongside the report, and marks them delivered. No generation happens here; the layer is pure read + mark.
- ingest — when the user replies, record the raw answer on the tape as an
echo_raw_answer record before any interpretation.
- distill — before the next run, read yesterday's
echo_raw_answer
records, call apply_answer, and mark the questions answered. Any delivered questions without a raw answer are marked expired and count toward the ignored limit.
Rules
- Evidence-backed: every question cites tape evidence (e.g. "3 items about
…
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: lukethecat
- Source: lukethecat/aperture
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.