La Local Chat
v1.0.0Operate and improve the La Local location-management chat product. Use when reviewing or changing the frontend chat app, backend webhook, search behavior, me...
⭐ 0· 171·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name, description, and instructions align: the skill focuses on search, create, and update flows for the La Local chat product and references frontend/backend responsibilities. It explicitly references Notion and Dropbox integrations (which fit the described product). One minor mismatch: the skill refers to performing Notion/Dropbox actions (e.g., "Create the Notion record immediately") but the skill declares no required environment variables/credentials — this could be because it's documentation/instructions rather than executable code, but is worth noting.
Instruction Scope
SKILL.md and the reference docs stay on-topic: they describe search rules, deterministic create/update flows, and preservation of thread_id. The instructions reference only the included reference files and product behavior; they do not instruct reading arbitrary system files or exfiltrating data. However, the runtime instructions assume the ability to create Notion records and tie Dropbox folders to Notion IDs; the skill does not specify how to authenticate to those services or where credentials come from, so an implementing agent would need external credentials or connectors to actually perform those actions.
Install Mechanism
No install spec and no code files are present. This is the lowest-risk category (instruction-only). Nothing would be written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables or credentials. Given it references external integrations (Notion, Dropbox), it is expected that those integrations require credentials at runtime — the absence of declared env vars is not necessarily malicious but is an omission to be aware of. Ensure the agent platform supplies appropriately-scoped credentials if the skill will cause API calls.
Persistence & Privilege
always is false and there is no indication the skill requests persistent system presence or modifies other skills or system-wide settings. Autonomous model invocation remains allowed (default), which is normal; nothing in the skill upgrades privileges.
Assessment
This skill is basically a document of rules and best practices for the La Local chat product; it does not install code or request credentials. Before using it in an agent that will perform actions: (1) verify how the agent will authenticate to Notion and Dropbox (the skill assumes those actions but doesn't provide credentials), (2) ensure any credentials provided to the agent are minimum-scope and stored securely, and (3) if you intend the agent to autonomously call external APIs, test in a safe environment to confirm behavior matches these deterministic rules (so it won't accidentally create or update real data). If you do not want the agent to perform live Notion/Dropbox operations, keep this skill as documentation only and avoid attaching credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97cbxhp1rgn6fspan2yj5xjgx82y8kz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.