PC*Miler
v1.0.1PCMier REST API provides methods to retrieves a series of geographic coordinates that make up a route.
⭐ 1· 1.5k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's name/description (PCMiler route/geocode REST API) matches the provided cURL examples and expected behavior. Requiring an API key is reasonable for this purpose, but the package metadata lists no required credentials while SKILL.md explicitly references PCMILER_API_KEY — that's an inconsistency.
Instruction Scope
SKILL.md only contains example cURL calls to pcmiler.alk.com and example JSON responses. It does not instruct reading local files, other environment variables, or sending data to unexpected third-party endpoints. The runtime behavior described is narrowly scoped to PCMiler API calls.
Install Mechanism
There is no install spec and no code files (instruction-only). Nothing is written to disk or downloaded by the skill itself, which reduces installation risk.
Credentials
The SKILL.md setup section requires an environment variable PCMILER_API_KEY (sensible for API access) but the skill's registry metadata declares no required env vars or primary credential. That mismatch could be an oversight or misconfiguration — it should explicitly declare the API key in metadata. Also the skill will send route/geocode data to pcmiler.alk.com, so the API key will be transmitted to that service.
Persistence & Privilege
The skill does not request always:true, does not modify system or other-skill configs, and does not require persistent system privileges. Autonomous invocation is allowed (platform default) but nothing in the skill asks for elevated persistence.
What to consider before installing
This is an instruction-only skill that demonstrates calling the official PCMiler REST endpoints — that is coherent with its purpose. However: (1) the SKILL.md requires PCMILER_API_KEY but the registry metadata does not list any required credentials — ask the publisher to correct the metadata so you can see exactly what will be requested. (2) The source/homepage is unknown; prefer skills that link to an official project page or repository. (3) Only supply a PCMiler API key with the minimum needed scope and avoid using high-privilege keys; consider creating a dedicated key that can be rotated. (4) Because the skill sends route and geocoding data to pcmiler.alk.com, confirm you are comfortable sending your addresses/coordinates to that service. If you need higher assurance, request the publisher to add provenance (homepage/repo), update metadata to declare PCMILER_API_KEY, and explain how the key is used.Like a lobster shell, security has layers — review code before you run it.
latestvk972pj7e9rtgndb16sreddz5yh80mrgt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.