Urea
v1.0.0Urea fertilizer reference — nitrogen management, application methods, volatilization loss, soil chemistry, and crop-specific rates. Use when planning nitroge...
⭐ 0· 91·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description (urea fertilizer reference, rates, losses, application) match the included SKILL.md and the bundled scripts/script.sh which prints reference text. There are no unrelated credentials, binaries, or install steps requested.
Instruction Scope
SKILL.md directs the agent to run scripts/script.sh with subcommands; the visible portion of script.sh prints static, topical content and stays within the stated purpose. SKILL.md documents an optional config variable UREA_DIR (~/.urea/) — the provided snippet does not show the script using it, which is a minor mismatch. Full verification is limited because the supplied script content in the report was truncated; the visible behavior is benign, but the remainder of the file should be checked to confirm there are no unexpected file reads/writes or network calls.
Install Mechanism
No install spec and the skill is instruction-only aside from shipping a local shell script. Nothing is downloaded or executed from external URLs; no package manager installs are specified.
Credentials
The skill requests no environment variables or credentials. SKILL.md mentions an optional UREA_DIR config, which is reasonable for a local data directory and not requested as a secret. There are no disproportionate secret or credential requests.
Persistence & Privilege
always:false and normal agent invocation are used. The skill does not request persistent platform privileges and does not indicate it would modify other skills or global agent settings.
Assessment
This appears to be a straightforward local reference skill that runs a bundled shell script to print urea/urea-management guidance. Before installing or enabling, you may want to: (1) open and review the entire scripts/script.sh file (the report contained a truncated excerpt) to ensure it does not perform unexpected file I/O or network calls; (2) confirm whether the script will create or write to ~/.urea/ (UREA_DIR) and that you are comfortable with that; and (3) if you will allow autonomous agent invocation, be aware the agent can run the script locally — run it in a sandbox or with limited permissions if you want to be cautious. If you provide the full script content I can re-check for any hidden network endpoints or file access.Like a lobster shell, security has layers — review code before you run it.
latestvk978mw57qtmkfz3r873ydavedh83b4tr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.