Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and SKILL.md all describe the same purpose (providing recommendation lists, routes and guides for trending toys). There are no extra binaries, env vars, or install steps that would be unexpected for this purpose.
Instruction Scope
SKILL.md is high-level and scoped to filters, return fields, example queries, and operational notes. It does not instruct reading local files or requiring credentials, but it is open-ended about how '每周迭代' and '结合新热度与口碑反馈' are achieved — that could imply web scraping or calling external APIs at runtime. This is not inherently malicious but grants broad discretion to the agent unless further constrained.
Install Mechanism
No install spec and no code files — instruction-only skill, so nothing is written to disk or downloaded during installation.
Credentials
The skill declares no environment variables, credentials, or config paths. The requested scope is proportionate to its stated function.
Persistence & Privilege
No elevated privileges requested. always is false and the skill is user-invocable; it does not request persistent or system-wide changes.
Assessment
This skill appears coherent and low-risk: it only contains guidance for producing toy recommendation lists and itineraries and does not request credentials or install software. Two practical points before enabling: 1) the SKILL.md is intentionally high-level about data sources — if you want to limit network scraping or external API calls, restrict the agent's network access or require explicit user consent before pulling web/social data; 2) because it allows the agent some discretion in gathering '热度与口碑' signals, review how the agent sources and cites information (which websites/APIs it will call) if accuracy or data provenance matters. Otherwise there are no immediate security red flags.Like a lobster shell, security has layers — review code before you run it.
latestvk97dfr4y65gv5h88d7pdb4r03d837acw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.