Cochesnet Cli
v0.1.0Use the cochesnet CLI to search coches.net listings and fetch listing details. Apply when a user asks for coches.net marketplace data or when you need the exact CLI commands and flags for cochesnet-cli.
⭐ 1· 1.7k·0 current·0 all-time
by@pjtf93
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description and commands all match: the SKILL.md documents how to run `cochesnet search` and `cochesnet listing` and lists only service-specific environment variables. Nothing requested appears unrelated to querying coches.net.
Instruction Scope
Instructions are limited to running the cochesnet CLI, using JSON output, and checking exit codes. They require network access to apps.gw.coches.net but do not instruct reading arbitrary system files or exfiltrating unrelated data.
Install Mechanism
This is instruction-only (no install spec), which is low-risk. SKILL.md says 'Requires cochesnet-cli installed (Node.js 18+)' but the skill metadata does not declare required binaries or an install source. That omission is a minor inconsistency: the agent or user will need to install the CLI from a trusted source (npm/GitHub), but the skill doesn't provide or pin an installation origin.
Credentials
Declared environment variables are service-specific (base URL, user agent, tenant/variant) and are not credentials or unrelated secrets. No unexpected credentials or config paths are requested.
Persistence & Privilege
always is false and there is no install-time behavior or requests to modify other skills or system-wide settings. The skill does not request elevated persistence.
Assessment
This skill is a simple CLI usage guide for cochesnet and appears coherent. Before installing or using it: (1) ensure you have a trusted source for the `cochesnet-cli` (the SKILL.md requires Node.js 18+ but gives no install URL — prefer the official npm package or the project's GitHub release), (2) be aware it needs network access to apps.gw.coches.net to work, (3) the listed environment variables are configuration (not secrets) but verify they don't get set to sensitive values, and (4) if you allow the agent to invoke this skill autonomously, it may run the CLI commands when asked — which is expected but verify the CLI binary you install is from a reputable source.Like a lobster shell, security has layers — review code before you run it.
latestvk97b5y0mx0b430bs21dqh3cntn7zw1n5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.