Book Tracker
v1.0.0Tracks your reading progress, notes, ratings, themes, and suggests what to read next based on your history and preferences.
⭐ 0· 87·0 current·0 all-time
byNico Lumma@rednix
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (track books, notes, suggestions) align with what the SKILL.md describes: local text files (library.md, reading-list.md, config.md), simple commands, and recommendation heuristics. No unrelated env vars, binaries, or install steps are requested.
Instruction Scope
Instructions expect the agent to create and manage local files (library.md, reading-list.md, config.md) and to interact with the user's channels (private channel). It also mentions integrating with a separate 'knowledge-capture' skill. This scope is reasonable for the stated purpose but you should verify where files are stored and how cross-skill sharing is handled (the skill relies on other platform capabilities for storage and privacy).
Install Mechanism
No install spec or code files present; instruction-only skills have minimal on-disk footprint and lower install risk.
Credentials
No environment variables, credentials, or config paths are requested. The skill does reference channel configuration (openclaw.requires config: channels) which is consistent with sending/receiving messages in the user's channel.
Persistence & Privilege
always:false and no special privileges requested. The skill can be invoked autonomously (platform default), which is expected; it does not demand permanent system-wide presence or modification of other skills' configs.
Assessment
This skill appears coherent and low-risk, but before installing: 1) Confirm where the files (library.md, reading-list.md, config.md) will be stored and ensure that storage location is acceptable (private workspace vs shared). 2) If you enable integration with a knowledge base/other skills, verify that those destinations honor the same privacy rules (private vs group visibility). 3) Test commands in a private channel first to confirm behavior and that the agent asks for confirmation before adding/removing entries. 4) Note the skill's source is 'unknown' — if you want stronger assurance, ask the publisher for a homepage or source repository or request the SKILL.md be signed/published from a known publisher. Overall, the skill requests no credentials or installs and its instructions match its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk976vthpq6pkz7b27smm2jbtd983verb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.