Parameter Golf Monitor

v1.0.0

Monitor the openai/parameter-golf competition leaderboard by fetching PR data from GitHub. Use this skill whenever the user asks about the parameter-golf com...

0· 104·0 current·0 all-time
byDex@dexhunter
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description claim to monitor openai/parameter-golf PRs and the included script directly implements that by calling GitHub's public API and extracting val_bpb scores. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs the agent/user to run the bundled Python script and describes flags (--me, --watch, --json, etc.). The runtime instructions and the script only access GitHub's public API and local CLI arguments; they do not read local secrets, other files, or send data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with a bundled script and no install spec. No external downloads, package installs, or extract operations are used. The script relies only on Python stdlib (urllib), matching README and SKILL.md.
Credentials
The skill declares no required environment variables or credentials and the script uses unauthenticated GitHub API calls (60 req/hour). Nothing in the code attempts to read environment variables or credentials.
Persistence & Privilege
The skill is not always-enabled, does not request persistent platform privileges, and does not modify other skills or system-wide settings. It merely fetches public data when invoked and (optionally) polls while running.
Assessment
This skill appears coherent and safe for its stated purpose. It makes unauthenticated requests to GitHub's public API (subject to a 60 requests/hour limit), so avoid using very frequent poll intervals unless you understand rate limits. The script does network I/O (to api.github.com) and will print or emit JSON of PR data — if you need higher rate limits or private repo access you would need to provide a GitHub token, which this skill currently does not request. As with any third-party code, review the bundled script before running in your environment if you have stricter policies (e.g., offline systems or environments that restrict outbound network access).

Like a lobster shell, security has layers — review code before you run it.

latestvk97bmxxc950bv7j7wfxbqxf025839wh2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments