Bingo
v3.0.0Generate and play bingo cards with number calling and verification. Use when running bingo games.
⭐ 0· 187·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided script functionality. Minor mismatch: the registry metadata lists no required binaries, but the script uses standard Unix utilities (shuf, mkdir, cat, wc, printf). These are common but should be declared so the agent environment is known to support them.
Instruction Scope
SKILL.md directs the agent to run the included scripts/script.sh commands. The script's actions are limited to local number generation and reading/writing calls to ~/.local/share/bingo/calls.txt; it does not reference external endpoints, unrelated files, or additional environment variables.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded or installed. A script file is included and executed by the commands; its contents are small and readable, and it doesn't perform downloads or extraction.
Credentials
No credentials or env vars are requested. The script writes and reads game state at $HOME/.local/share/bingo/calls.txt and creates the directory if missing — this is appropriate for a local game tool but users should be aware of that file location. Also depends on utilities like shuf which may not be present on all systems (not declared).
Persistence & Privilege
Skill is not always-enabled and does not request elevated privileges. It only writes its own data file under the user's home directory and does not modify other skills or global agent config.
Assessment
This skill appears to do exactly what it says: local bingo card generation, number calling, and simple state saved at ~/.local/share/bingo/calls.txt. Before installing consider: 1) The included script uses the shuf utility (and other core Unix tools); ensure your environment has these binaries or the commands may fail. 2) The 'new-game' command truncates calls.txt (it will erase previous call history). 3) There is a small bug in the script's check command (it looks for arguments in $2 instead of $1), which may cause the check command to fail — harmless but annoying. 4) The package source is 'unknown' in the metadata; if you want stronger assurance, verify the homepage/author or inspect the script file yourself (it's short and readable). If those points are acceptable, the skill is coherent and contains no obvious malicious behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk97e5d7hx08gcp66d0w2gs3w49837pfd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.