Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (poem reference tool) match the provided files: SKILL.md documents commands and the included script implements those commands to print reference text. No unrelated binaries, env vars, or credentials are requested.
Instruction Scope
The runtime instructions and the script stay within scope (printing local documentation). Minor documentation inconsistencies exist: e.g., the cheatsheet references a 'troubleshooting' command while the script implements 'debugging'; show_help uses a single-quoted heredoc so the $VERSION token won't expand. These are quality issues but not security concerns.
Install Mechanism
No install spec is provided (instruction-only plus a small shell script). Nothing is downloaded or written to disk by an installer; therefore, no elevated install risk is introduced.
Credentials
The skill requires no environment variables, credentials, or config paths. The script does not read env vars or config files, so requested access is minimal and proportional to the purpose.
Persistence & Privilege
The skill is not always-enabled and does not request persistent privileges or modify other skills or system-wide settings. Autonomous invocation is allowed by platform default but presents no special risk here given the skill's limited behavior.
Assessment
This skill appears low-risk and does what it says: prints local reference documentation. Before installing, you may: (1) review the script contents yourself (it's small and plaintext), (2) run it with 'help' first to inspect output, and (3) prefer running in a restricted environment if you want extra caution. Note the minor doc mismatches (e.g., 'troubleshooting' vs 'debugging') — these are usability issues, not security problems.Like a lobster shell, security has layers — review code before you run it.
latestvk9705jpkzhbkgbmsndr85rj73183efgg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.