Steam Lowest Price Skill
v1.0.0Monitor Steam game prices and alert when a game hits historical low or a user target price. Use when users ask to track Steam discounts, watch specific games...
⭐ 0· 130·0 current·0 all-time
by@g-zoe
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the included script: the code resolves games via CheapShark, fetches Steam prices, and implements add/list/remove/check/watch functionality. Required resources (no env vars, no extra binaries) are proportional to the stated purpose.
Instruction Scope
SKILL.md only instructs running the included Python script and suggests a cron/cron-like invocation. The script's file reads/writes its own data/watchlist and state files under the skill directory; it does not access unrelated system files or environment variables.
Install Mechanism
There is no install spec (instruction-only) and the package includes a small Python script and requirements.txt (requests). The skill performs outbound HTTPS calls to known public APIs (CheapShark and Steam) — expected for this function. No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill requires no credentials or environment variables. It writes local state and watchlist JSON under the skill's data directory (BASE/data). No secret access or unrelated credentials are requested or used.
Persistence & Privilege
The skill is not always:true and does not modify other skills or system-wide settings. It can be invoked autonomously (platform default) and will make outbound API calls when run — this is expected for a price-monitoring skill.
Assessment
This skill appears to do exactly what it says: it queries CheapShark and the Steam store and stores a local watchlist/state file in the skill directory. Before installing, consider: (1) it will make outbound HTTPS requests to CheapShark and store.steampowered.com when run; (2) it writes watchlist.json and state.json under the skill's data folder (ensure you trust that location and have appropriate filesystem isolation); (3) it requires Python and the 'requests' package (pip install -r requirements.txt); (4) if you allow autonomous invocation, the agent may run the script on a schedule and send alerts — if you prefer, run it manually or in a restricted environment. No credentials are requested by the skill. If you want extra caution, run the script in a sandbox or review the included script yourself (it is short and readable).Like a lobster shell, security has layers — review code before you run it.
alertvk976e3szg45j97ypyxrqq9xhzs836zn3discountvk976e3szg45j97ypyxrqq9xhzs836zn3latestvk976e3szg45j97ypyxrqq9xhzs836zn3pricevk976e3szg45j97ypyxrqq9xhzs836zn3steamvk976e3szg45j97ypyxrqq9xhzs836zn3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.