Nearby Bookshops
v0.1.0Find nearby bookshops. Invoke when user asks for bookstores near me.
⭐ 0· 93·0 current·0 all-time
by@clawkk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the content of SKILL.md: it is explicitly about finding nearby bookshops and declares required inputs (location, radius, limit, filters). There are no unrelated environment variables, binaries, or config paths.
Instruction Scope
SKILL.md stays within scope (takes location, returns POI list, describes errors and privacy guidance). It does not specify which data provider or external API to call — this is not dangerous but leaves implementation details open; an implementation would likely need a POI provider and associated credentials.
Install Mechanism
No install spec and no code files (instruction-only). Nothing is written to disk or fetched at install time, minimizing risk.
Credentials
The skill declares no required environment variables or credentials. The inputs (user location) are appropriate for the stated purpose; the SKILL.md also recommends consent and coordinate fuzzing, which is proportionate.
Persistence & Privilege
always is false and there are no requests to modify system or other skills' configs. Nothing requests elevated or persistent privileges.
Assessment
This skill is small and coherent: it only needs the user's location to find nearby bookshops. Before installing, confirm how it will be implemented in your environment — specifically, which POI/data provider will be used and whether that provider requires API keys or will receive raw coordinates. Ensure the implementation enforces user consent, limits retention of precise coordinates (or applies the suggested fuzzing), and stores any provider credentials securely. If future versions add an install step or request environment variables, re-evaluate for disproportionate access.Like a lobster shell, security has layers — review code before you run it.
latestvk971fzz7dq36q9tcmqhth3khfd83f9y0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.