NBA Today Pulse
v1.0.10Timezone-aware NBA daily intelligence using bundled public ESPN/NBA fetchers plus official NBA injury-report PDFs, with compact day view, same-day stats, pha...
⭐ 2· 235·0 current·0 all-time
byStsk@hhjsnsnsk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (NBA daily intelligence, ESPN/NBA fetchers, injury-report PDFs) align with the included modules (providers for ESPN/NBA, PDF parser, report/rendering components). Required binaries (python3) and no required env vars are consistent with the declared runtime.
Instruction Scope
SKILL.md limits runtime to running the bundled entrypoint (tools/nba_today_command.py -> router -> providers). It documents that outbound HTTP is limited to public ESPN/NBA endpoints and official injury-report PDFs and warns not to replace bundled fetchers with freeform browsing. The dispatcher uses subprocess.run with an argv list (not a shell string), and code shows no instructions to read unrelated user files or secrets.
Install Mechanism
No install spec is provided (instruction-only install), so nothing is downloaded at install time. The bundle includes Python scripts that run from the local tools/ directory; there is no external archive-download or execution-from-URL step.
Credentials
No credentials or secret environment variables are required. Optional timezone env vars are documented and reasonable. Code references one optional override env var (NBA_TR_NOW_ISO) used for testing/time resolution; this is not a secret and matches the skill purpose.
Persistence & Privilege
always is false. The skill runs local Python scripts and does not attempt to modify other skills or system-wide configs. Autonomous invocation is enabled by default (normal for skills) but not combined with any broad credential requests.
Assessment
This bundle appears coherent and self-contained: it runs local Python tools, performs outbound HTTP to public ESPN/NBA endpoints, and downloads/parses official PDF injury reports for injury queries. It does not request credentials. Before installing, consider: 1) run the skill in a sandboxed environment if you want to limit network or file access; 2) if you have a strict whitelist policy, review provider_espn.py, provider_nba.py, and provider_nba_injuries.py to confirm the exact hosts/endpoints used; 3) note that the PDF parser processes remote PDF bytes (malformed PDFs could cause processing errors), so avoid exposing highly privileged runtimes. If any of those are concerns, review the provider files in full or run the code in an isolated container.Like a lobster shell, security has layers — review code before you run it.
NBAvk979czghwjd770842038wekh5x83n2z8advanced analysisvk979czghwjd770842038wekh5x83n2z8analysisvk97bnvv0ddfvvp1x5p5xhnk5s183kadjbasketballvk97bnvv0ddfvvp1x5p5xhnk5s183kadjlatestvk9766vnh9468ege7k3yx6hrx7s841t7vlivevk97bnvv0ddfvvp1x5p5xhnk5s183kadjnbavk97bnvv0ddfvvp1x5p5xhnk5s183kadjpredictionvk97bnvv0ddfvvp1x5p5xhnk5s183kadjscoresvk97bnvv0ddfvvp1x5p5xhnk5s183kadjsportsvk97bnvv0ddfvvp1x5p5xhnk5s183kadj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3