Book Quotes
v1.0.0Extract memorable quotes and passages from books. Get the most inspiring and thought-provoking quotes.
⭐ 0· 108·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, description, SKILL.md, and code are consistent: the skill searches a Heardly book database, extracts quotes, and formats them. However, SKILL.md claims 'support multiple book sources' and references a 5904-book Heardly DB; the implementation only attempts to load a local data file at ./data/books.json and contains no network code to fetch remote sources. The package manifest/file list does not include a data directory, so the advertised dataset may be missing or expected to be installed separately.
Instruction Scope
SKILL.md gives limited, scope-bound instructions (install via clawhub, call getQuotes). The skill's runtime code only reads a local data file (./data/books.json) and processes text; it does not access other files, environment variables, or external endpoints, nor does it instruct the agent to collect general system context.
Install Mechanism
No install spec is present (instruction-only). The package includes code files and a CLI but no installer that downloads external artifacts. This is low-risk from an install perspective.
Credentials
The skill requires no environment variables, credentials, or config paths. The code only uses filesystem access relative to its package directory to load a local JSON file. No secrets or unrelated credentials are requested.
Persistence & Privilege
The skill is not marked always:true and does not modify other skills or system-wide settings. It does not persist credentials or attempt to enable itself automatically. Normal autonomous invocation (disable-model-invocation is false) is the platform default and appropriate here.
Assessment
This skill appears coherent and low-risk: it does not request credentials or make network calls. Before installing, note that it expects a local Heardly database at ./data/books.json but the package listing does not include that file — the skill will return "No book found" if the dataset is absent. If you care about provenance or licensing of the quote data, ask the publisher for the Heardly dataset or verify that data/books.json is present and properly licensed. If you need quotes from live online sources, prefer a skill that explicitly fetches remote data and states what credentials or APIs it uses.Like a lobster shell, security has layers — review code before you run it.
latestvk975291c32gbffttjj7zkg3cr983d8dp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.