Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the contained script and SKILL.md. The script implements add/list/search/export/stats/config and stores data in ~/.turbine (or TURBINE_DIR), which is coherent with a local performance calculator.
Instruction Scope
SKILL.md tells the agent to run scripts/script.sh commands. The script only performs local filesystem operations (create dir, read/write data.jsonl, config.txt, exports) and prints to stdout; it does not access external network endpoints or unrelated system paths.
Install Mechanism
There is no install spec — this is instruction-only plus an included shell script. No downloads or package installs occur, so the installation surface is minimal.
Credentials
No required environment variables or credentials are declared. The script respects an optional TURBINE_DIR override; otherwise it uses the user HOME directory. No secrets appear to be requested or needed.
Persistence & Privilege
The skill does not request permanent/always-on privilege, does not modify other skills or system agent settings, and confines writes to its own data directory.
Assessment
This skill appears coherent and runs only a local shell script that stores data under ~/.turbine (or a directory you set via TURBINE_DIR). Before installing: 1) Review the script if you plan to store sensitive data — it stores plaintext JSONL and config entries and does not escape user input (quotes could break JSON). 2) Back up or inspect ~/.turbine if you care about data retention. 3) Note sed -i and other utilities may behave slightly differently on some platforms (e.g., macOS); test in your environment. 4) The skill makes no network calls and asks for no credentials, but only install/use it if you trust the source repository.Like a lobster shell, security has layers — review code before you run it.
latestvk976ef56dqampjy2y115bdjgvh839e0a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.