Showstart Skills
v1.0.3秀动演出查询与管理工具。用于查询秀动平台上的演出信息，包括演出详情、城市搜索、分类搜索、风格搜索、艺人搜索、附近演出等功能。当用户需要查找演出信息、了解演出详情、按城市/分类/风格搜索演出、或查找附近演出时使用此技能。
⭐ 0· 148·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (演出查询与管理) align with the included Python client and SKILL.md: functions and CLI cover activity, keyword, city, category, style, name, nearby and an all-artists endpoint. The requested resources (none) are appropriate for a simple API client.
Instruction Scope
SKILL.md instructs the agent to call the provided Python functions or run the CLI to query a remote API — this stays within the skill's stated purpose. Note: the client issues HTTP requests to an external endpoint (BASE_URL). That means queries (including any coordinates or keywords the user supplies) are transmitted to that remote host; this is expected but relevant for privacy and trust.
Install Mechanism
No install spec (instruction-only + a simple Python script). Nothing is downloaded or written during install. This is low risk from an install mechanism perspective.
Credentials
The skill requires no environment variables, credentials, or config paths. The lack of requested secrets is proportional to the described functionality.
Persistence & Privilege
always:false and default invocation settings are used. The skill does not request persistent system privileges or modify other skills/configs.
Assessment
This skill is coherent for searching Showstart events, but it sends user queries to an external server (BASE_URL in the script). Before installing or using it: 1) verify the endpoint (skill.showstart.com) and prefer HTTPS — the docs mention https://skill.showstart.com while the script uses http:// (this mismatch should be fixed to avoid plaintext transport); 2) avoid sending sensitive or private data through the skill; 3) if you care about provenance, ask the publisher for a homepage or source repo or run the script in a restricted/sandboxed environment and monitor outgoing requests; 4) consider changing the BASE_URL to a verified endpoint (https) if you obtain one.Like a lobster shell, security has layers — review code before you run it.
latestvk97b3zng4jpvk267ckaef1c7jd83mt34
License
MIT-0
Free to use, modify, and redistribute. No attribution required.