Race Finder
v1.0.0Find upcoming races — running, trail, triathlon, cycling, swimming, and obstacle courses. Search by location, distance, sport, and date. Returns race details with registration links.
⭐ 0· 791·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (find upcoming races) match the SKILL.md and README which document a public HTTP API (https://api.racefinder.net). No unrelated credentials, binaries, or platform access are requested. The README and docs reference racefinder.net and RunSignUp as data sources; while the publisher identity/homepage is missing, that is a transparency issue rather than an incoherence with the stated capability.
Instruction Scope
SKILL.md only documents GET requests to a public API and provides curl examples. It does not instruct the agent to read local files, access system credentials, or exfiltrate data to unexpected endpoints. It will send user query parameters to the documented external API (expected behavior).
Install Mechanism
There is no install spec and no code files; this is instruction-only documentation. No archives, third-party packages, or downloads are specified, which minimizes installation risk.
Credentials
The skill declares no required environment variables, credentials, or config paths. The documented API is public and explicitly 'No authentication required,' so there is no disproportionate secret access requested.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not modify other skills or system configuration in the documentation. Autonomous invocation is allowed by platform default but the skill itself does not request elevated persistence.
Assessment
This skill is a documentation-only wrapper for a public race-search API and appears internally consistent. Things to consider before installing: 1) The skill will make outbound HTTPS requests to api.racefinder.net when used — if you have privacy concerns, avoid sending sensitive location or personally identifying data. 2) The package has no published homepage or verified publisher metadata in the registry; if you want higher assurance, verify the domain (racefinder.net), check the referenced GitHub repo (nftechie) and confirm the API is legitimate. 3) Registration links may redirect to third-party sites (e.g., runsignup); verify those links before submitting payment or personal information. Otherwise, no credentials or local file access are requested and the skill's behavior matches its description.Like a lobster shell, security has layers — review code before you run it.
latestvk979gst3h457vb1r8t8vb7efv580tk4v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.