ClawHub

Baseball

v0.1.3

Fetch MLB game schedules, live game status, box scores, player search, and season statistics via the MLB Stats API. Use when the user asks about baseball gam...

⭐ 2· 722·0 current·0 all-time
byKevin Haney@khaney64
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (MLB schedules, live status, box scores, player search/stats) match the code and runtime instructions. The only required binary is python3, which is appropriate. The code only references MLB endpoints (statsapi.mlb.com) and an internal team map.
✓
Instruction Scope
SKILL.md instructs running the included Python scripts with specific subcommands and arguments. There are no instructions to read unrelated files, prompt for secrets, or transmit data to non-MLB endpoints. The documentation uses an absolute workspace path (/home/claw/.openclaw/...), which is consistent with the agent runtime and not a security concern here.
✓
Install Mechanism
No install spec is provided; the skill is delivered as scripts and docs. No third-party downloads, package managers, or extract/install steps are present.
✓
Credentials
No environment variables, credentials, or config paths are required. The skill does outbound network calls to the MLB Stats API only, which is necessary for its function.
✓
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. Model invocation is not disabled (default), which is normal for user-invocable skills and reasonable here.
Assessment
This skill appears to do what it says: it runs local Python scripts that call the public MLB Stats API (statsapi.mlb.com) and prints results. It does not request secrets or access unrelated system files. Before installing, consider whether you are comfortable allowing the skill to make outbound network requests from your agent (the only external traffic is to the MLB API). If you have strict egress controls, you can restrict or monitor outbound calls to the MLB API host. If you want extra assurance, a quick code review of the included scripts in your environment confirms there are no hidden endpoints or credential leaks.

Like a lobster shell, security has layers — review code before you run it.

latestvk97516gmawqnt2c5aj6s35b8cd83dbse

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚾ Clawdis
Binspython3

Comments