Cinemas
v0.1.0Find nearby cinemas. Invoke when user asks for movie theaters near me.
⭐ 0· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (find nearby cinemas) matches the instructions and required inputs (lat/lng, radius, limit, filters). There are no unrelated binaries, env vars, or config paths requested.
Instruction Scope
SKILL.md defines inputs, outputs, error codes, and privacy guidance, which is appropriate. However it does not specify how to obtain POI data (no provider/API, no endpoints, no network call guidance) and it references a local file URI (STANDARD_RESPONSE.md at a user-local path) that is not bundled. The lack of a defined data source leaves runtime behavior underspecified and could allow broad agent discretion (e.g., calling arbitrary external APIs or web searches using the user's location).
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk and there are no download URLs to review.
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate for its stated purpose.
Persistence & Privilege
The skill is not always-enabled and uses default invocation settings. It does not request persistence or modify other skills or global settings.
Assessment
This skill appears coherent for listing nearby cinemas, but before installing you should: 1) confirm which data provider or API the agent will call (and what credentials, endpoints, or rate limits are required), because SKILL.md does not include that; 2) ensure the referenced STANDARD_RESPONSE.md schema is available to the agent or replace it with an included/remote schema (the current file:/// path is local and not bundled); 3) enforce explicit user consent for sharing precise location and consider requiring the agent to grid/blur coordinates before sending them to any third party; and 4) test the skill in a safe environment to see what external requests it makes (so you can verify it doesn't send location data to unexpected endpoints). Overall the skill is not requesting excessive privileges, but it is underspecified about runtime data sources — ask the publisher for those details before enabling it in production.Like a lobster shell, security has layers — review code before you run it.
latestvk970xjbrp51ejfrf5z7mx243hd83fjkf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.