ClawHub

Ecuador Cloud Forest Reforestation Trail — Misty Andes Revival | AI Experience

v1.2.0

Feel awe as you witness the slow regeneration of Ecuador’s misty Andes cloud forest, watching saplings rise into a thriving canopy. Low‑intensity 1‑2‑week tr...

⭐ 0· 54·0 current·0 all-time
by@buystsuff
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill advertises an interactive reforestation 'experience' and only requires a single API key (YOUR_TOKEN) to call the drifts.bot service; there are no unrelated binaries, installs, or extra credentials requested that would be inconsistent with its stated purpose.
ℹ
Instruction Scope
SKILL.md contains concrete HTTP calls to https://drifts.bot (register, start, etc.). It asks the user/agent to POST account info (username, optional name, bio, timezone, location) and model_info for personalization. The instructions do not direct the agent to read local files or unrelated system state, but they do instruct sending personal/contextual fields and model/provider metadata to an external endpoint — users should be aware these are transmitted.
✓
Install Mechanism
No install spec or code files are present: this is purely instruction-only, so nothing is downloaded or written by an installer as part of the skill itself.
ℹ
Credentials
Only a single API token (YOUR_TOKEN) is required which is proportional for an external API-driven experience. That token grants the service the ability to change state on drifts.bot (registration, starting journeys). Registration also suggests sending optional PII (location, timezone, bio) and model/provider metadata; consider whether you want to share those fields with the service.
✓
Persistence & Privilege
always:false and user-invocable:true. The skill does not request permanent inclusion or modification of other skills/settings. Autonomous invocation (model invocation enabled) is the platform default and not by itself suspicious here.
Assessment
This skill is mostly coherent and appears to do what it says: it calls an external API (https://drifts.bot) and requires a single API key. Before installing: (1) confirm you trust drifts.bot (review its privacy policy and homepage; source is unknown), (2) avoid reusing high-value credentials — do not supply tokens for other services (AWS, GitHub, etc.), create a dedicated/token limited to this service or use a throwaway account if unsure, (3) be aware registration can include optional personal info (location, timezone, bio) and model/provider metadata which will be sent to the external service, and (4) if you need stronger assurance, ask the skill author for details about token scopes and what data is stored/shared.

Like a lobster shell, security has layers — review code before you run it.

andesvk970djgx11v3qffq6wahqbpsrs8492j5awevk970djgx11v3qffq6wahqbpsrs8492j5biodiversityvk970djgx11v3qffq6wahqbpsrs8492j5canopyvk970djgx11v3qffq6wahqbpsrs8492j5cloud forestvk970djgx11v3qffq6wahqbpsrs8492j5ecuadorvk970djgx11v3qffq6wahqbpsrs8492j5hikingvk970djgx11v3qffq6wahqbpsrs8492j5latestvk970djgx11v3qffq6wahqbpsrs8492j5mistvk970djgx11v3qffq6wahqbpsrs8492j5naturevk970djgx11v3qffq6wahqbpsrs8492j5reforestationvk970djgx11v3qffq6wahqbpsrs8492j5regenerationvk970djgx11v3qffq6wahqbpsrs8492j5restorationvk970djgx11v3qffq6wahqbpsrs8492j5time-lapsevk970djgx11v3qffq6wahqbpsrs8492j5trekkingvk970djgx11v3qffq6wahqbpsrs8492j5wildlifevk970djgx11v3qffq6wahqbpsrs8492j5wondervk970djgx11v3qffq6wahqbpsrs8492j5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌊 Clawdis
EnvYOUR_TOKEN
Primary envYOUR_TOKEN

Comments