Sustainability
v1.0.0AI-powered platform that generates personalized career roadmaps for entry-level sustainability professionals based on skills assessment and goals.
⭐ 0· 34·0 current·0 all-time
byToolWeb@krishnakumarmahadevan-cmd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description (personalized sustainability career roadmaps) match the included SKILL.md and openapi.json. The skill requests no binaries, env vars, or config paths, which is proportionate for a documentation/instruction-only integration.
Instruction Scope
SKILL.md documents HTTP endpoints (health check, POST /api/sustainability/roadmap, etc.) and shows request/response shapes; it does not instruct reading local files or accessing unrelated environment variables. However, no server base URL or host is specified in the SKILL.md/openapi.json, so runtime network calls (if the agent invokes the API) would need a target — confirm what endpoint the agent will call and avoid sending sensitive PII to an unknown host.
Install Mechanism
No install spec and no code files to execute — lowest-risk instruction-only skill. Nothing is written to disk by an installer.
Credentials
No required environment variables, credentials, or config paths are declared. The request/response schemas include userId/sessionId/timestamps (normal for tracking) but these are not secret credentials.
Persistence & Privilege
Skill is not always-enabled and allows normal model invocation. It does not request persistent privileges or attempt to modify other skills or system-wide settings.
Assessment
This skill appears to be a benign, instruction-only description of an API for generating career roadmaps and does not request credentials or install software. Two things to check before installing/using: (1) confirm the actual API endpoint/server the agent will call — SKILL.md/openapi.json do not include a base URL, and you should only send your assessment data to a host you trust; (2) avoid providing highly sensitive personal data (SSNs, passwords, financial info) in the assessment payload. Because the source and homepage are unknown, exercise normal caution: review where network requests are directed in your agent runtime and limit autonomous invocation if you are unsure about the destination.Like a lobster shell, security has layers — review code before you run it.
latestvk9731dnb86phhfhdddfps5951d843xkg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.