ClawHub

Nestle

v0.1.0

Nestlé brands, products, nutrition info, stock data, and sustainability initiatives. World's largest food company.

⭐ 0· 75·0 current·0 all-time
by@hanxueyuan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name and description promise Nestlé brand/product/company information; the SKILL.md contains exactly that static reference material and suggested user queries. There are no unrelated requirements (no env vars, binaries, or config paths) that would be disproportionate to the stated purpose.
✓
Instruction Scope
SKILL.md is static content (brand lists, company facts, data sources) and does not instruct the agent to read system files, access environment variables, call arbitrary external endpoints, or transmit data elsewhere. It only suggests user-facing queries and cites public sources, which is appropriate for an informational skill.
✓
Install Mechanism
There is no install specification and no code files — the skill is instruction-only, so nothing is written to disk or downloaded. This is the lowest-risk install profile and matches the skill's scope.
✓
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. That is proportionate for a read-only informational reference about a company.
✓
Persistence & Privilege
always is false (default) and the skill does not request any elevated persistence or write access. disable-model-invocation is false (normal), so the agent may call the skill autonomously per platform defaults; this is expected and not concerning given the skill's narrow scope.
Assessment
This skill is a low-risk, instruction-only reference about Nestlé: it asks for no credentials and installs nothing. Consider that the content is static and may become outdated or incomplete — verify time-sensitive items (stock price, CEO, revenue) against live sources. If you need live financial data or authenticated access to corporate reports, prefer a dedicated connector that explicitly declares the required API credentials. Otherwise it is safe to install from a permissions standpoint.

Like a lobster shell, security has layers — review code before you run it.

latestvk97963q8na822yhn5abnvjbyg983htg4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍫 Clawdis

Comments