bangumi-explorer
v1.0.1Query Bangumi (bgm.tv) for anime, manga, light novels, games, and music. Search subjects, view details and episode lists, browse seasonal anime charts, ratin...
⭐ 0· 43·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the actual behavior: the code queries the public Bangumi API (https://api.bgm.tv/v0) for subjects, people, episodes, rankings, etc. No credentials, unrelated services, or surprising binaries are required.
Instruction Scope
SKILL.md directs the agent to run the included bangumi.py (preferred) or fall back to direct API calls via web_fetch/browser. The runtime instructions are narrowly scoped to search/info/episodes/season/rank/person/calendar/character queries. The script performs HTTP GET/POST, rate-limits requests, and reads/writes cache files in the user's home (~/.bangumi/cache). Note: the skill instructs to 'present script output as-is' which gives the script control over formatting; that is expected but worth noting.
Install Mechanism
No install spec; the skill is instruction-only plus a bundled Python script. This is low-risk compared to downloading/extracting external installers. The script claims zero third-party dependencies and uses Python stdlib (urllib, json, pathlib).
Credentials
The skill requests no environment variables or credentials. It does perform network requests to the public Bangumi API and writes cache files under ~/.bangumi/cache. Those are proportionate to a read-only query tool; there is no sign it attempts to read unrelated config or secrets.
Persistence & Privilege
always is false and the skill does not request permanent platform privileges. It writes its own cache under ~/.bangumi and includes a cache-cleaning helper; it does not modify other skills or system-wide configs.
Assessment
This skill appears to be a straightforward Bangumi query tool. Before installing consider: (1) it will execute a local Python script (requires Python 3.9+) — run in an environment you trust or sandbox if you have concerns; (2) it writes cached JSON to ~/.bangumi/cache (auto-expires/cleans) — check that directory if you care about local files; (3) the fallback uses web_fetch/browser and will cause the agent to issue HTTP requests itself (token cost if using an LLM-based fetcher) — prefer running the bundled script if available; (4) no credentials are requested and the code shown uses only the official API base and a User-Agent header, but if you want maximal assurance review the full bangumi.py file yourself before enabling. If you need higher assurance, run the script manually first to observe its behavior and network calls.Like a lobster shell, security has layers — review code before you run it.
latestvk97fmvtgazxma2pb7ryzw284fh8478jk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.