# Security and Privacy Notes

AI Daily Digest is a local report-generation workflow. It does not host a
service or store secrets in this repository.

## Secret Handling

- `GEMINI_API_KEY` is read from the environment for CLI runs.
- The repo includes only placeholder examples such as `your-key`.
- The OpenCode skill may store preferences under `~/.hn-daily-digest/config.json`.
- Do not commit generated config files or `.env` files.

## Network Boundary

The script makes outbound requests to:

- public RSS/Atom feeds embedded in `scripts/digest.ts`
- Gemini's content generation API

No browser cookies, account sessions, or private local files are required.

## Generated Output

Reports are Markdown files written to the requested output path. The default
repo ignore rules keep common local output paths out of git:

```text
output/
digest-*.md
.env
```

Review generated reports before publishing because summaries are AI-generated
and source availability may change.