Orders
v3.4.1Track orders locally. Use when creating orders, checking status, updating quantities, canceling, or generating sales reports.
⭐ 0· 236·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (create, list, update, cancel, report orders) matches the provided SKILL.md and script. The script implements those commands and stores data locally in ~/.orders/orders.json; nothing required by the skill is disproportionate to that purpose.
Instruction Scope
SKILL.md instructs the agent to run the included script with explicit subcommands. The script operates on a local data file and does not reference unexpected files, secrets, or external endpoints in the visible code. Commands and file paths are confined to the stated order-management scope.
Install Mechanism
No install spec is present (instruction-only). The skill includes a shell script that runs with bash + python3; no downloads or package installs are performed. This is a low-risk installation model for a local tool.
Credentials
The skill declares no required environment variables, no credentials, and no config paths beyond its local data directory (~/.orders). The script uses only environment variables it sets itself when invoking python and does not request or access unrelated secrets.
Persistence & Privilege
always is false and the skill does not request any elevated or persistent platform privileges. It stores data under the user's home directory (~/.orders) which is appropriate for this functionality.
Assessment
This appears to be a simple local orders tool that stores data in ~/.orders/orders.json and requires bash+python3. Before installing or running: 1) inspect the full scripts/script.sh file (the provided content was truncated in the listing) to ensure there are no hidden network calls or unexpected behavior in the remaining lines; 2) run it in a sandbox or non-sensitive account the first time to verify behavior; 3) ensure the ~/.orders directory has appropriate filesystem permissions if the data is sensitive; 4) note the SKILL.md version header differs slightly from registry version (minor mismatch) but is not itself dangerous. If you need the agent to run this autonomously, remember it will have access to the local orders file—limit autonomous invocation if that file contains sensitive customer data.Like a lobster shell, security has layers — review code before you run it.
latestvk9790anyb1x5ssphdk2cs6jrzd833bzx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.