Embed

v2.0.2

embed

0· 104·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description and provided artifacts align: the SKILL.md says the skill outputs reference documentation and the included scripts produce only heredoc text. Minor inconsistency: registry metadata and SKILL.md list version 2.0.2 while the script's internal VERSION variable is 2.0.1; this is likely a packaging/versioning oversight, not a functional mismatch.
Instruction Scope
Runtime instructions (SKILL.md) state no external API calls or credentials and the executable script only emits embedded documentation blocks. The script does not read files, environment variables, or make network calls; it only runs local shell functions and prints text. One small ambiguity: the quickstart text mentions "Required tools and access credentials" in a generic doc paragraph, but this is documentation text and not an actual runtime requirement enforced by the script.
Install Mechanism
There is no install spec and no downloads — the skill is instruction-only with a simple bundled bash script. No external code is fetched or extracted, which is low risk.
Credentials
No environment variables, credentials, or config paths are declared or used. The only potential confusion is a doc line in quickstart referencing "access credentials" generically; however, the skill does not actually request or use any secrets at runtime.
Persistence & Privilege
The skill does not request persistent presence (always is false), does not modify other skills or system configuration, and contains no install hooks. It has no elevated privileges.
Assessment
This skill appears safe and does exactly what it says: print offline reference docs. Before installing, review the small script (scripts/script.sh) yourself (already included) to confirm it matches expectations; note the minor version string mismatch between the package and the script. Because it contains no network calls or credential usage, it does not need secrets — if you see prompts for keys or network activity after installation, stop and inspect further. Otherwise it's fine to install for local, read-only reference use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9787x0302pm2z0f5yzgd28gx983fpa5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments