Taiwan Basketball

v1.2.2

Taiwan professional basketball stats, scores, schedules for PLG and TPBL.

0· 97·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (PLG + TPBL stats, schedules, live scores, box scores, notifications) matches the included scripts and modules which scrape PLG site, call the TPBL API, and persist results to a local SQLite DB. Requested resources (network, disk cache, local DB) are proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs running the included scripts via `uv run` and documents features that map closely to the code. One incongruity: registry metadata lists no required binaries, yet SKILL.md expects a `uv` runner to run scripts and script headers list Python dependencies (beautifulsoup4, lxml). The runtime instructions read/write the local DB (~/.local/share/taiwan-basketball/basketball.db) and cache (~/.cache/taiwan-basketball) and perform network calls to pleagueofficial.com and api.tpbl.basketball — all within expected scope. Recommend verifying `basketball_notify.py` if you want to ensure notifications don't push to third-party push services (the repository appears to store subscriptions locally).
Install Mechanism
There is no download/install step and no external archive or unknown URL usage. The skill is distributed as source scripts (no runtime installer). The only install-time concern is that running `uv run` (as recommended) will likely fetch Python packages from PyPI (e.g., beautifulsoup4, lxml) — this is normal but worth noting since dependencies will be installed if you run the command.
Credentials
The skill declares no required environment variables or credentials. The code optionally reads BASKETBALL_DEBUG and uses the user's home directory for cache and DB. No secrets, cloud keys, or unrelated credentials are requested.
Persistence & Privilege
The skill writes to user-scoped paths (~/.cache/taiwan-basketball and ~/.local/share/taiwan-basketball/basketball.db) which is expected for a CLI tool that stores caches/subscriptions. always:false and normal invocation settings are used. It does not request system-wide privileges or modify other skills' configurations.
Assessment
What to consider before installing or running this skill: - Functionality: This is a straightforward scraper/API client for PLG and TPBL that caches responses and stores subscriptions locally. It does network requests to pleagueofficial.com and api.tpbl.basketball and writes cache and a SQLite DB in your home directory. - Missing declared binary: SKILL.md expects you to run scripts with `uv run`, but the skill metadata lists no required binaries; ensure you trust and understand the `uv` runner you use (and that it will install Python dependencies). The scripts themselves list dependencies (beautifulsoup4, lxml). - Disk writes: The skill will create ~/.cache/taiwan-basketball and ~/.local/share/taiwan-basketball/basketball.db to store cache, games, standings, and subscriptions. If you care about privacy, review the DB contents before sharing. - Network & privacy: No API keys or secrets are required, but the skill makes outbound HTTP(s) calls to the official endpoints. If you need to audit network usage, run the tool in a controlled environment first. - Review notifications: If you plan to use the notification features, inspect basketball_notify.py to confirm notifications remain local (subscriptions stored in DB) and do not forward data to any external push service you don't expect. - Dependency installation: When you run `uv run` (or otherwise install dependencies), packages will usually be fetched from PyPI. Prefer running in a virtual environment or sandbox if you want to limit system changes. - Trust & provenance: The skill's source is included, but the registry 'Source: unknown' and no homepage mean provenance is limited. If you need higher assurance, review the code (it is small and readable) or run it in an isolated environment before granting it broader access.

Like a lobster shell, security has layers — review code before you run it.

latestvk974yjwta57fxryzcmtp1p3t2183rrse

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments