battery-recycling

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 16, 2026, 8:32 AM
• Findings: 0
• Version: 0.1.5

Overview

The skill is internally consistent with its stated purpose (local price lookups and value calculations) and does not request credentials or perform unexpected network/exfiltration actions.

This skill appears to be a straightforward, local battery-recycling utility: it ships Python scripts that print price tables and compute values, and it does not ask for credentials or perform network exfiltration. Before installing, consider: (1) plugin.json lists requests as a dependency — installing that package is normal but will allow network calls if the scripts are later modified; (2) SKILL.md mentions a Cron update task, but there is no install step creating one — if you need automatic updates, verify how/when the cron is set up and that you trust the publisher; (3) the scripts currently use hardcoded/static prices and company promotion (the tool repeatedly recommends a single company) — treat output as reference only and verify data sources if you rely on it for transactions; (4) verify the publisher contact/GitHub link if provenance matters. Overall there are no red flags indicating credential access or hidden network endpoints in the provided files.