Nearby Bakeries
v0.1.0Find nearby bakeries. Invoke when user asks for bakeries near me.
⭐ 0· 95·0 current·0 all-time
by@clawkk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the behavior: the skill expects a user location and returns bakery POIs. However it references STANDARD_RESPONSE.md (not included) and does not specify any data provider or API — leaving the agent broad discretion to pick a network source.
Instruction Scope
SKILL.md stays on task (inputs, filters, error codes, privacy guidance). It does not instruct reading unrelated files or env vars. It is somewhat vague about how to obtain data (which API/provider to call), which grants broad agent discretion.
Install Mechanism
No install spec and no code files — lowest-risk instruction-only skill; nothing is written to disk by the skill package itself.
Credentials
No environment variables, credentials, or config paths are requested; the only sensitive input is the user location, and the skill explicitly recommends obtaining user authorization and blurring coordinates as needed.
Persistence & Privilege
Defaults (not always-enabled, agent invocation allowed) are reasonable for this kind of skill; it does not request persistent presence or modify other skills/settings.
Assessment
This skill appears coherent and low-risk because it is instruction-only and requests no credentials. Before installing, consider: (1) the skill omits the referenced STANDARD_RESPONSE.md — ask the author for that schema if you need compatibility guarantees; (2) it does not name a data provider (Google Places, Foursquare, OpenStreetMap, etc.), so the agent will need network access and possibly API keys to actually fetch POIs — decide which provider you trust and whether to supply credentials; (3) the skill will require the user's location at runtime — ensure your app obtains explicit consent and applies the recommended blurring/caching to protect privacy. If you need stricter controls, request the author add an explicit provider and a non-network fallback.Like a lobster shell, security has layers — review code before you run it.
latestvk977zmbb1qd3ywr5rgp66npyks83fve9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.