ClawHub

Furnace

v1.0.0

Furnace temperature and control manager

⭐ 0· 89·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the provided script and commands. The skill only requires local data storage (FURNACE_DIR optional) and exposes expected commands (status/add/list/search/remove/export/stats/config). No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
SKILL.md simply invokes scripts/script.sh for each command and the script confines activity to the DATA_DIR (default ~/.furnace). It does not access other system files or network endpoints. Note: the script appends raw values into JSONL without escaping, which may break JSON structure if entries contain quotes/newlines — this is a robustness/data-integrity concern rather than evidence of scope creep.
✓
Install Mechanism
No install spec; this is an instruction-only skill with an included shell script. Nothing is downloaded from external URLs or written outside the data directory by the script itself.
✓
Credentials
No required environment variables or credentials. The optional FURNACE_DIR env var is justified for customizing the local data directory.
✓
Persistence & Privilege
The skill is not force-included (always:false) and does not request persistent platform-wide privileges. It does not modify other skills or system-wide config.
Assessment
This skill appears to do what it says: a local CLI that stores records under ~/.furnace/. It does not perform network calls or request secrets. Before installing, consider: (1) the data is stored unencrypted in your home directory — sensitive info should not be stored there; (2) entries are written without JSON escaping, so values containing quotes or newlines may corrupt the JSONL file; (3) the script uses sed -i which has different behavior on macOS (portability issue). If you plan to use this in production or with sensitive data, review/modify the script to add proper escaping/validation and consider storing data in a safer format/location.

Like a lobster shell, security has layers — review code before you run it.

latestvk97412n7z99zeg72zrqtpe9qw1838tw7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments