Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (boiler efficiency & sizing tool) matches the provided script and commands. All required functionality (add/list/search/remove/export/stats/config) is implemented in scripts/script.sh and the SKILL.md maps directly to those commands.
Instruction Scope
SKILL.md only instructs running the bundled script with listed commands and documents BOILER_DIR for data location. The runtime instructions only read/write files under the declared data directory (~/.boiler) and do not request unrelated system files, environment variables, or external endpoints.
Install Mechanism
No install spec is present (instruction-only plus a bundled script). Nothing is downloaded or written to system locations outside the user data dir. This is the lowest-risk install model.
Credentials
No required environment variables or credentials. An optional BOILER_DIR variable is documented and used to override the data directory; this is proportional to the stated purpose.
Persistence & Privilege
Skill does not request always:true or other elevated privileges. It writes only to its own data directory (~/.boiler) and its own config file; it does not modify other skills or system-wide agent settings.
Assessment
This skill appears to be a simple local CLI that stores entries in ~/.boiler/data.jsonl and config in ~/.boiler/config.txt. It requests no secrets and makes no network calls. Before installing, consider: (1) do not store sensitive credentials or PII in entries because they will be kept as plain JSONL in your home directory; (2) exported files are created in the current working directory (watch for overwriting existing files); (3) on macOS the script uses GNU-style sed -i which may behave differently (you may need to adjust it); and (4) although the skill is safe-looking, only run code from sources you trust—this bundle executes a shell script, so inspect it as you already have. Overall the skill is consistent with its description.Like a lobster shell, security has layers — review code before you run it.
latestvk977cj492cymn08bncvkvshx118388sb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.