Mafengwo
v0.1.0Retrieve and summarize public travel notes and popular attraction data from Mafengwo for destinations, including ratings, reviews, tickets, and opening times.
⭐ 0· 122·0 current·0 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description and the SKILL.md align: both describe retrieving and summarizing public travel notes and attraction pages. The skill does not request unrelated credentials or system access. One minor note: the doc says pages are dynamically rendered and require waiting for content, which implies a JS-capable fetch/browser tool but none is declared — reasonable but worth knowing.
Instruction Scope
Instructions limit activity to public pages and explicitly prohibit reverse-engineering APIs and bulk scraping. They are otherwise high-level (‘wait for content to load’, ‘use light summaries’), leaving implementation details and rate-limiting enforcement to the agent. This vagueness could lead to heavier scraping if the agent is given broad web access, so operators should enforce limits.
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing will be written to disk by the skill itself during install.
Credentials
The skill requests no environment variables or credentials, which is proportional. However, runtime may require a headless/JS-enabled browser or scraping capability (not declared). Ensure any tooling granted to implement this functionality is appropriate and minimal.
Persistence & Privilege
always:false and user-invocable:true (defaults). The skill does not request persistent privileges or modify other skills/config; autonomous invocation remains possible but is platform-default.
Assessment
This is an instruction-only skill that describes summarizing public pages on mafengwo.cn and asks for no credentials or installs — that is coherent. Before enabling: confirm the skill's provenance (registry owner/homepage are minimal), test it in a sandbox, and only grant the minimal web-browsing tool needed (e.g., a JS-capable headless browser) if required. Configure and enforce rate limits, respect robots.txt and site terms, and avoid bulk downloads or storing PII. If you need stronger guarantees, ask the publisher for provenance (source repo or homepage) and an explicit description of required runtime tools. Like a lobster shell, security has layers — review code before you run it.
latestvk978vjhq6xnrvzryjwkhdd1y7s834j71
License
MIT-0
Free to use, modify, and redistribute. No attribution required.