ClawHub

Tweetnugget

v1.2.0

A random inspirational tweet from curated collections of hand-picked wisdom by tech leaders, founders, and philosophers.

⭐ 0· 72·0 current·0 all-time
by@acailic
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (random inspirational tweets) match the actual files and code: references/*.json contains quoted items and scripts/get_quote.py reads those local files to return quotes. There are no unrelated required binaries, env vars, or external services.
✓
Instruction Scope
SKILL.md instructs the agent to run the local Python script to read JSON files in references/. The script only reads local files (ignores symlinks), enforces a 1MB per-file size limit, filters by tag or collection, and prints formatted quotes. Instructions do not ask for system-level reads, network calls, or data exfiltration.
✓
Install Mechanism
No install spec (instruction-only) and included code is small and local. Nothing is downloaded or extracted from external URLs during install.
✓
Credentials
No environment variables, credentials, or config paths are required. All data is read from local JSON reference files supplied with the skill.
✓
Persistence & Privilege
Skill does not request permanent presence (always:false). It does not modify other skills or system configuration and contains no autonomous setup steps beyond the normal agent invocation behavior.
Assessment
This skill appears safe and does what it claims: pick quotes from bundled JSON files. Before installing, you may want to: (1) review the included references/*.json to ensure attributions and links meet your standards and avoid copyrighted or sensitive content you don't want exposed; (2) note that the agent will run a local Python script (python3) to read those files—no network access or secrets are required; (3) if you or others add new collections, validate their JSON and content (the code ignores symlinks and limits file size to 1MB). If you require stricter control, consider running the skill in an environment where you vet any added JSON files first.

Like a lobster shell, security has layers — review code before you run it.

latestvk972v8xzweasryymcrj6ctawdn8433bz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments