Taiwan Calendar Plugin
v0.0.1Taiwan calendar query for accurate working day/holiday information. Use when user asks about Taiwan dates, working days, holidays, make-up workdays, or needs date calculations. Solves Claude's knowledge cutoff issues with Taiwan's administrative calendar.
⭐ 0· 987·0 current·0 all-time
by@pigfoot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, CLI usage, and included Python script all align: the script fetches Taiwan calendar data from public open-data endpoints, performs date arithmetic, and caches results. No unrelated credentials, binaries, or system-wide config access are requested.
Instruction Scope
SKILL.md instructs the agent to run the included script via a managed Python runner. The runtime behavior is limited to HTTP queries to public APIs, local caching in the system temp directory, timezone handling, and printing results. The instructions do not ask the agent to read arbitrary user files, environment secrets, or to transmit data to unknown third-party endpoints beyond the declared data sources.
Install Mechanism
There is no install spec (instruction-only plus an included script), so nothing is written to disk by an installer. Dependencies are standard Python packages (requests, python-dateutil) and are expected for HTTP + date parsing. One data source uses a CDN (jsdelivr/GitHub CDN) which is a third-party host rather than a government domain — this is reasonable for static JSON but worth noting.
Credentials
The skill declares no required environment variables or credentials and the code does not require secrets. It only needs network access to public APIs and permission to write a small cache file in the system temp directory.
Persistence & Privilege
The skill is not marked always:true and is user-invocable only. It writes a temporary cache file (taiwan-calendar-cache.json) to the system temp directory and does not modify other skills or global agent configuration. Note: the agent will execute the script (via Bash/uv run) when invoked or if autonomously selected — autonomous invocation is the platform default.
Assessment
This skill appears to do what it claims: query public Taiwan calendar APIs and compute working-day math. Before installing, consider: 1) Network access — the script makes outbound HTTPS requests to data.gov.tw, data.ntpc.gov.tw and a jsdelivr (GitHub CDN) URL; if your environment restricts network egress or you distrust third-party CDNs, review or host the source data yourself. 2) SSL handling — the code contains logic that may disable SSL verification for some endpoints (which increases MITM risk); if you are concerned, inspect and modify the script to enforce verify=True. 3) Local cache — the script writes a small JSON cache to the system temp directory (no secrets expected), so ensure that is acceptable. 4) Autonomy — the skill runs a shell command when used; only enable it if you trust the author or have reviewed the included script. If you want extra assurance, run the script locally and inspect network requests it makes before enabling the plugin for autonomous use.Like a lobster shell, security has layers — review code before you run it.
latestvk97esc4q3xt7dn50sb2pgj7vnn80zqky
License
MIT-0
Free to use, modify, and redistribute. No attribution required.