football-pilgrimage
v1.0.2Generate a football pilgrimage guide for any team — stadium tours, football museums, fan pubs, and cultural landmarks. Each spot comes with deep storytelling...
⭐ 1· 66·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the declared behavior: ESPN API (public) + web search + optional flyai for travel are appropriate data sources for building pilgrimage guides. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md directs the agent to fetch ESPN endpoints, perform web searches (including Wikipedia via search), build crest URLs, and optionally call flyai for flights/hotels/tickets. These actions are expected for the skill, but they involve numerous third-party HTTP requests (image CDN, ticket sites, Wikipedia, flyai) which will expose the agent/platform network metadata and may surface incorrect or unverified facts from scraped sources. The instructions do not read local files or request unrelated system data.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest risk for on-disk code installation.
Credentials
Requires no environment variables or credentials. The only potential credential need is for the optional flyai integration (not declared); the skill does not demand keys or secrets by default.
Persistence & Privilege
always:false and normal autonomous invocation allowed. The skill does not request persistent system-level privileges or attempt to modify other skills/configuration.
Assessment
This skill appears coherent and does what it says: it will make network requests to ESPN, Wikipedia and many other websites to assemble narrative guides and may fetch team crest images from ESPN's CDN. Before installing, consider: (1) privacy: external requests reveal network metadata (e.g., IP) to those sites; (2) accuracy: historic “On This Day” items and spot backstories come from web searches and should be double-checked for factual correctness; (3) flyai/ticket integration: if you plan to use booking features, confirm how flyai is integrated on your platform and whether any API keys or payment flows will be requested or stored; (4) if you want to limit outbound network access or prevent automatic ticket/booking calls, restrict or disable those optional steps. Overall the skill is consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk970nrdy5815etyehah4wzj1cs842zdq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.