ClawHub

Nearby Barbershops

v0.1.0

Find nearby barbershops. Invoke when user asks for a haircut near me.

⭐ 0· 95·0 current·0 all-time
by@clawkk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description describe a simple POI lookup for barbershops. The skill requests no binaries, env vars, or config paths, which is consistent with an instruction-only lookup helper.
ℹ
Instruction Scope
SKILL.md specifies inputs, filters, response schema and privacy guidance (only run after user authorizes location, blur coordinates), which is appropriate. However it does not specify any data provider or API to use (e.g., Google Places, Yelp, internal POI DB) and it references STANDARD_RESPONSE.md which is not included. That vagueness could lead an agent to choose arbitrary external sources or prompt for credentials at runtime.
✓
Install Mechanism
No install spec and no code files — instruction-only skill, so nothing is written to disk or installed. Low install risk.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. This is proportionate to the described functionality.
✓
Persistence & Privilege
always is false and the skill has no install-time actions or abilities to modify system or other skills. Normal, limited privilege.
Assessment
This skill is lightweight and internally consistent for the stated purpose, but before installing check: (1) which data source the agent will use to find POIs — confirm a trusted provider or an internal dataset, (2) whether the agent might request API keys or external access at runtime (it currently declares none), and (3) the missing STANDARD_RESPONSE.md so you know the exact output format. If you want tighter control, require the skill to declare the POI provider and expected API credentials or provide an explicit mapping to an internal service.

Like a lobster shell, security has layers — review code before you run it.

latestvk972m1efryyw0jefy7b62g5v6183e76j

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments