ClawHub

Forage Shopping

v1.0.0

Search and compare products across merchants. Find the best deals with price comparison and shopping recommendations.

⭐ 1· 520·0 current·0 all-time
by@jalexspringer
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match what the SKILL.md instructs: search, compare, and find deals. It does not request unrelated credentials, binaries, or system access.
ℹ
Instruction Scope
Instructions are narrowly scoped to adding a single MCP server URL to openclaw.json and calling three named tools. This stays within the advertised purpose, but it does cause the agent to send user queries to an external service (https://forageshopping.com/mcp).
✓
Install Mechanism
No install spec or code is present (instruction-only), so nothing new is written to disk beyond the suggested change to openclaw.json. This is low-risk compared to downloads or executables.
✓
Credentials
No environment variables, credentials, or config paths are required. The lack of required API keys is consistent with the SKILL.md claim that the remote server 'handles everything.'
ℹ
Persistence & Privilege
always:false and user-invocable:true (normal). The only persistent change suggested is adding an MCP server entry to openclaw.json — this is reasonable for the skill but effectively routes agent queries to a third-party endpoint, which increases exposure.
Assessment
This skill is coherent for price comparison, but it forwards queries to an external MCP server (https://forageshopping.com/mcp). Before installing: 1) verify the domain and operator (privacy policy, reputation); 2) don't send sensitive personal or financial data in queries; 3) confirm the connection uses HTTPS and inspect openclaw.json changes (back it up) so you can remove the MCP entry later; and 4) try a few non-sensitive searches to observe results and behavior. If you need stronger guarantees about data handling, contact the skill author or prefer a skill with documented authentication and privacy terms.

Like a lobster shell, security has layers — review code before you run it.

latestvk97282hk0mtv6759mwrawk9vb581kjq6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌿 Clawdis

Comments