Chinese Daily Assistant
v1.0.1提供中国主要城市天气、汇率换算、节日提醒、生活小贴士和中英短句快速翻译的中文日常生活助手。
⭐ 0· 733·9 current·9 all-time
byJenner@jenner4s
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (weather, exchange, festivals, tips, translation) match the included files and local JS implementation. Minor wording inconsistency: SKILL.md and README sometimes refer to using public APIs (中国气象局/中国人民银行) while the shipped code uses local simulated/static data—this appears to be a planned future integration rather than a present requirement.
Instruction Scope
SKILL.md and other docs only instruct typical usage (commands, examples) and do not request reading unrelated files, accessing secrets, or sending data to external endpoints. The runtime instructions are limited to local operations and calling the provided scripts.
Install Mechanism
No install spec is provided (instruction-only + code bundle). There are no downloads, no external package installs, and package.json has no dependencies. Nothing in the manifest indicates code will be fetched from arbitrary URLs or executed during install.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. The code does not read process.env or request credentials—so requested privileges are proportionate to its purpose.
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill does not request persistent system-wide changes or modify other skills. No elevated privileges are requested.
Assessment
This skill appears internally consistent and implements all features locally using bundled data. Before installing: (1) confirm you trust the unknown author/source (no homepage provided); (2) inspect scripts/main.js yourself (it’s short and readable) or run the included test.js in a sandboxed environment; (3) if future updates promise real-time API integration, verify what API endpoints and credentials will be required before granting them. If you want extra caution, run the skill inside an isolated container or VM so future network-enabled versions can’t exfiltrate data without your review.Like a lobster shell, security has layers — review code before you run it.
latestvk97cdyk9xa7s41k5ax35aa8zr581zwap
License
MIT-0
Free to use, modify, and redistribute. No attribution required.