Calctool
v2.0.1Perform basic, scientific, and financial calculations from the terminal. Use when computing interest, converting units, or solving quick math.
⭐ 0· 242·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (calculator, converters, financial math) align with the provided script and SKILL.md: commands log user inputs and provide simple stats/export/search functionality. No unexpected services or credentials are requested.
Instruction Scope
Instructions and the script limit actions to local logging, search, export, and health/status operations under $HOME/.local/share/calctool. Note: the tool persistently logs whatever user input is given (including potentially sensitive data) and the export/json writer does not escape values, which can produce malformed JSON or embed unescaped data.
Install Mechanism
No install spec is provided and the skill is instruction-only with a single shell script. Nothing is downloaded or installed by the skill itself.
Credentials
No environment variables, credentials, or external config paths are required. The script only uses $HOME and standard POSIX utilities listed in SKILL.md.
Persistence & Privilege
always:false and user-invocable. The script writes only to its own data directory under the user's home and does not modify other skills or system-wide configs.
Assessment
This skill appears to do what it says: local logging and simple exports with no network or credential access. Before installing/running: 1) Inspect the script (scripts/script.sh) yourself — it will write all provided inputs to ~/.local/share/calctool. 2) Avoid logging secrets (passwords, API keys, private data) because entries are stored in plaintext and included in exports. 3) Exports (JSON) do not escape values reliably — review exported files before sharing. 4) Consider setting directory permissions (chmod 700 ~/.local/share/calctool) if you want to restrict access. If you need stronger guarantees (e.g., encryption, sanitized exports, or stricter input validation), request or implement those changes before using the tool for sensitive data.Like a lobster shell, security has layers — review code before you run it.
latestvk97b6bdmcxxthqjwx77pqmfays8355ng
License
MIT-0
Free to use, modify, and redistribute. No attribution required.