PVPC España
v1.0.0Consulta y optimiza precios de electricidad PVPC en España (tarifa 2.0TD para usuarios domésticos). Usa cuando necesites (1) precio actual con contexto (alto/medio/bajo vs día), (2) identificar periodos valle/llano/punta según horario, (3) encontrar las horas más baratas del día, (4) optimizar cuándo usar electrodomésticos (lavadora, lavavajillas, secadora, etc.) para minimizar coste eléctrico.
⭐ 1· 1.7k·0 current·0 all-time
by@didelco
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actual behavior: the scripts fetch PVPC prices from a public ESIOS endpoint, compute stats, classify prices, find cheap ranges and optimal windows for appliances. There are no required env vars, no unrelated binaries, and no requests for cloud credentials—everything requested is proportional to the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run the included scripts which only query the public ESIOS API and perform local calculations. The instructions do not ask to read unrelated files or transmit data to unknown endpoints. Minor inconsistencies: SKILL.md examples show a 1.5-hour duration for 'secadora' but optimize_appliance.py requires an integer --duration (the script will treat duration as int and reject non-integers). Also the skill states it doesn't detect holidays (documented), and tarifa_periodos.py uses a simplified summer-time check and comments that may be slightly inconsistent with real DST rules (functional bug, not exfiltration).
Install Mechanism
There is no install spec (instruction-only), which reduces installer risk. However, the skill includes executable Python scripts bundled in the skill. Running those scripts will execute code from an unknown source on the host — this is expected for code-providing skills but means users should inspect or sandbox before running if the source is untrusted.
Credentials
No environment variables, tokens, or credentials are requested. The only external interaction is HTTPS GET requests to a documented ESIOS public endpoint (no authentication headers required). This level of access is proportional to the task.
Persistence & Privilege
The skill does not request persistent presence (always:false). It does not modify other skills or system-wide configuration according to the package contents. The default model invocation is allowed (normal for skills) but there is no additional privileged behavior.
Assessment
This skill appears to do what it claims: it queries the public ESIOS PVPC endpoint and computes cheap-hour recommendations. Before installing/running: (1) review the bundled Python scripts locally or run them in a sandbox — there is no install step, but executing the scripts runs code from an unknown source; (2) note the tool requires internet access to https://api.esios.ree.es and does not use or request any tokens; (3) be aware of minor functional inconsistencies (example: SKILL.md shows a 1.5h duration for 'secadora' while the script requires integer hours — pass an integer or adjust the script) and that holidays/timezone/DST handling is simplistic; (4) if you plan automated use, run with --json and validate outputs against a trusted source for a few runs. If you don't trust the unknown publisher, consider copying only the specific logic you need or reviewing the code line-by-line before execution.Like a lobster shell, security has layers — review code before you run it.
latestvk97cy4e1ew58qeaxy81x6pnqt58059y4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.