Colorpick
v2.0.0Color picker and converter. Use when you need colorpick.
⭐ 0· 306·1 current·1 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (color picker & converter) align with the included scripts: bash wrapper plus embedded Python perform conversions, palettes, harmonies, contrast checks, and preview features. There are no requests for unrelated services or credentials.
Instruction Scope
SKILL.md and the scripts point to expected local operations. The scripts create and read logs under a user data directory and implement search/export functions that read those logs. These behaviors are consistent with a UX history feature, but they do collect and persist whatever inputs the user provides (timestamps + input strings). Also the SKILL.md suggests an env var COLORPICK_DIR to change the data directory, but the provided script defines DATA_DIR from HOME and does not (in the shown lines) read COLORPICK_DIR—this doc/runtime mismatch may affect where data is stored.
Install Mechanism
There is no install spec (instruction-only). The skill is delivered as scripts included in the package; nothing is downloaded from external URLs or written to unexpected system locations during install.
Credentials
The registry metadata declares no required env vars or credentials, which is appropriate. However, the runtime scripts assume python3 is available (embedded Python helper in scripts/color.sh) even though no required binaries are declared. Also SKILL.md mentions COLORPICK_DIR to override the data directory but the script uses DATA_DIR="$HOME/.local/share/colorpick" and does not appear to honor COLORPICK_DIR in the visible code — this is an inconsistency to be aware of.
Persistence & Privilege
always is false and the skill is user-invocable. The skill writes to a per-user data directory (~/.local/share/colorpick) and maintains history.log and multiple .log files. This is expected for a tool that saves recent entries, but it does persist user inputs locally and provides export/search features, so consider privacy of entered data.
Assessment
This skill appears to be a local color utility and is internally consistent with that purpose. Before installing, note: (1) it stores usage/history (timestamps and whatever input you provide) under ~/.local/share/colorpick by default and can export those logs — if you enter sensitive text it will be saved locally; (2) the scripts call python3 but the metadata doesn't list python3 as a required binary, so ensure python3 is available in your environment; (3) SKILL.md mentions COLORPICK_DIR to change the data directory but the script uses DATA_DIR and doesn't appear to honor COLORPICK_DIR in the shown code — if you need the data in a different location, inspect or modify the script to respect your chosen env var; (4) there are no network calls or extra credentials requested. If local logging is acceptable and python3 is present, the skill is coherent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk977t65fpjftf3jjd1y0hyp4hs833ft0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.