Joke Api
v1.0.1Access diverse jokes by category, language, and type with filters for safe content using the free JokeAPI without requiring registration or an API key.
⭐ 0· 237·4 current·4 all-time
by@djttt
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (Joke API client) match the included files and instructions. Minor mismatch: the SKILL.md and README show a 'joke' CLI command and the repo includes scripts (scripts/joke.py and scripts/joke.sh), but there is no install step or declared required binaries. The scripts assume python3 and curl are available and that the user will run the scripts or install them to PATH; these runtime dependencies are not declared in the registry metadata.
Instruction Scope
SKILL.md instructs only how to call the public JokeAPI endpoints and contains sample code (Node/Python/Bash). The runtime instructions and included scripts only perform outbound HTTP requests to the official JokeAPI domain and process responses; they do not read local credentials, system files, or send data to other endpoints.
Install Mechanism
No install spec is provided (lowest-risk category). Because code files are included but no installer is declared, the scripts will not be automatically placed on PATH; a user must run them directly or install them manually. This is a functional oddity but not a security risk by itself.
Credentials
The skill requests no environment variables, keys, or config paths. The scripts only make network calls to https://v2.jokeapi.dev. No credentials or unrelated service tokens are requested or used.
Persistence & Privilege
Skill flags are default (always: false, model invocation allowed). The skill does not request persistent presence or modify other skills or system-wide settings.
Assessment
This skill appears to be a simple client for the public JokeAPI. Before installing or running: (1) review the two provided scripts yourself — they are short and only perform HTTPS requests to jokeapi.dev; (2) note there is no automatic installer or declared binaries: the scripts expect python3 and curl and won't be added to your PATH unless you do so manually; (3) the skill makes outbound network requests to jokeapi.dev (so your queries/texts are sent to that service) and JokeAPI can return offensive content unless you enable safe-mode/blacklist flags; and (4) the package source has no homepage listed—if you want greater assurance, fetch the official client from the JokeAPI GitHub or run the included scripts in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk9752q2rssdnpgt419nt5ef2y18306ns
License
MIT-0
Free to use, modify, and redistribute. No attribution required.