Late Brake
v0.0.3Pure CLI racing lap data analysis tool. Supports NMEA/VBO import, auto lap splitting, lap comparison, outputs structured comparison results for AI coaching....
⭐ 1· 107·0 current·0 all-time
byHan Kai@isaachan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and instructions: parsers, lap splitter, comparator, track management and JSON output are present. Required capabilities (file read/write, local track data) align with the stated purpose. No unrelated credentials or external services are requested.
Instruction Scope
Runtime instructions and CLI code operate on user-supplied data files and local track definitions. The skill reads input files, creates per-file cache files named .{filename}.lb.json in the same directory, and writes user track JSON under ~/.late-brake/tracks. These file operations are expected for the stated purpose, but users should be aware that the skill will write caches next to source files and store custom tracks in the home directory. The code includes path-normalization checks to mitigate path traversal when creating caches and user track files.
Install Mechanism
No install spec is provided (instruction-only install), which is low risk from arbitrary downloads. SKILL.md declares Python package dependencies (click, pydantic, numpy, geographiclib, jsonschema, wcwidth) that OpenClaw will install; the bundle includes source Python files. The absence of a platform-level install recipe is not inherently risky, but installing the declared Python dependencies will modify the agent environment.
Credentials
The skill does not request environment variables, secrets, or external credentials. It only needs filesystem access (reading input files, writing caches and user track JSON) which is appropriate for a CLI data analysis tool.
Persistence & Privilege
The skill is not marked always:true and does not modify other skills or global agent settings. Its persistent artifacts are confined to ~/.late-brake/tracks and per-file .{filename}.lb.json caches; this level of persistence is proportional to the function.
Assessment
This skill appears to be what it claims: a local CLI lap-data analysis tool. Before installing, note that: (1) OpenClaw (or your environment) will install the declared Python dependencies into the agent's Python environment; (2) the tool will write cache files next to any data files you process (.{filename}.lb.json) and will store custom tracks under ~/.late-brake/tracks — only run it on files you trust and be comfortable with those writes; (3) there are minor non-security issues (e.g., a small bug where the 'add' action reports update after write and a version string mismatch) but nothing indicates malicious behavior; (4) no network endpoints, credentials, or external servers are contacted by the shipped code in the included files. If you require stricter isolation, run the skill in a sandboxed environment or inspect/modify the code prior to use.Like a lobster shell, security has layers — review code before you run it.
gpsvk97cppge9zb0xmzp99g1gcx7qd83qybclapvk97cppge9zb0xmzp99g1gcx7qd83qybclatestvk97cppge9zb0xmzp99g1gcx7qd83qybcracingvk97cppge9zb0xmzp99g1gcx7qd83qybctrackvk97cppge9zb0xmzp99g1gcx7qd83qybcvbovk97cppge9zb0xmzp99g1gcx7qd83qybc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.