Harrypotter

CLI for AI agents to lookup Harry Potter universe info for their humans. Uses HP-API. No auth required.

Security Scan

The skill's stated purpose (querying the HP-API) and required tools (bash, curl, jq) align, but the package is missing the referenced wrapper script and README instructs you to git-clone a third-party repo — forcing an external code download — which is a supply-chain risk.

Purpose & Capability

The name/description (Harry Potter CLI using HP-API) aligns with the declared requirements (bash, curl, jq) and no credentials are requested — that's coherent. However, the SKILL.md and Agent Implementation Notes reference a local wrapper script at {skill_folder}/harrypotter and scripts/harrypotter, but this package contains only README.md and SKILL.md (no scripts). That mismatch means the published skill cannot run as-described without fetching additional code.

Instruction Scope

Runtime instructions tell the agent to run a local executable (./harrypotter ...). The SKILL.md does not include the actual script or explicit curl commands, so the agent would either fail or be prompted to obtain/run external code. The README suggests running git clone and chmod on scripts/harrypotter — instructions that involve downloading and executing third-party code not included in the package.

Install Mechanism

There is no formal install spec in the registry package. The README contains manual install steps that require git-cloning https://github.com/jeffaf/harrypotter-skill and making scripts executable; that means installing arbitrary code from an external repository (and the registry owner ID differs from the GitHub username in README). Because the package as published omits the scripts, using the skill will push users toward an out-of-band code download, which is a higher-risk install pattern.

Credentials

No environment variables or credentials are requested. This is proportionate to the stated purpose (public HP-API with no auth).

Persistence & Privilege

always is false and there are no indications that the skill attempts to persistently modify agent/system configuration. Autonomous invocation is allowed but that is the platform default and not itself a red flag here.

What to consider before installing

This skill appears to do what it says (query the public HP-API) and does not request any secrets — that part is fine. However, the published package is incomplete: SKILL.md and README expect a local wrapper script (scripts/harrypotter) that is not included. The README instructs you to git-clone a GitHub repo (https://github.com/jeffaf/harrypotter-skill) and make scripts executable. Before installing or running anything, inspect that remote repository and the exact script contents — do not blindly run chmod +x and execute downloaded scripts. Also note the registry owner (kn754...) does not match the GitHub username in README; ask the publisher to either include the wrapper script in the package or provide an explicit, verifiable install spec (signed release, checksum, or official release URL). If you want a lower-risk option, request that the skill include inline curl/jq examples or an internal instruction-only wrapper so no external code download is required.

Harry Potter Lookup

CLI for AI agents to search and lookup Harry Potter universe info for their humans. "Who was in Slytherin again?" — now your agent can answer.

Uses HP-API (free Harry Potter API). No account or API key needed.

Usage

"Who are the main Harry Potter characters?"
"List the Hogwarts students"
"Who's in Gryffindor house?"
"What spells are in Harry Potter?"
"Search for Hermione"

Commands

Action	Command
All characters	harrypotter characters [limit]
Students only	harrypotter students [limit]
Staff only	harrypotter staff [limit]
By house	harrypotter house <name>
Spells	harrypotter spells [limit]
Search	harrypotter search <query>

Examples

harrypotter characters 10         # First 10 characters
harrypotter students              # All Hogwarts students
harrypotter staff                 # All Hogwarts staff
harrypotter house gryffindor      # Gryffindor members
harrypotter house slytherin       # Slytherin members
harrypotter spells 15             # First 15 spells
harrypotter search "hermione"     # Find character by name

Output

Character output:

🧙 Harry Potter — Gryffindor, Half-blood, Patronus: Stag
🧙 Hermione Granger — Gryffindor, Muggleborn, Patronus: Otter
🧙 Draco Malfoy — Slytherin, Pure-blood

Search output (detailed):

🧙 Hermione Granger — Gryffindor, muggleborn, Patronus: otter
   Actor: Emma Watson
   Wand: vine, dragon heartstring, 10.75"
   Born: 19-09-1979

Spell output:

✨ Expelliarmus — Disarms your opponent
✨ Lumos — Creates a small light at the wand's tip
✨ Avada Kedavra — The Killing Curse

Notes

• Uses HP-API (hp-api.onrender.com)
• No authentication required
• Houses: gryffindor, slytherin, hufflepuff, ravenclaw
• Default limit is 20 items per query
• Search is case-insensitive

---

Agent Implementation Notes

Script location: {skill_folder}/harrypotter (wrapper to scripts/harrypotter)

When user asks about Harry Potter:

1. Run ./harrypotter search "name" for specific characters
2. Run ./harrypotter house <name> for house members
3. Run ./harrypotter spells for spell information
4. Run ./harrypotter students or ./harrypotter staff for role-based lists

House names (case-insensitive):

• gryffindor
• slytherin
• hufflepuff
• ravenclaw

Don't use for: Non-HP fantasy content, general trivia not in the API.