Beeminder
v1.0.0Beeminder API for goal tracking and commitment devices. Use when checking Beeminder goals, adding datapoints, viewing due goals, managing commitments, or tracking habits. Triggers on "beeminder", "goals due", "add datapoint", "track habit", "goal status", "derail".
⭐ 2· 1k·5 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill's stated purpose (Beeminder API access) matches the SKILL.md examples, but the metadata (required env vars / primary credential) does not list the two credentials the instructions require. Also the SKILL.md claims 'No CLI dependencies' while using curl, jq, date and shell constructs — these mismatches suggest sloppy packaging or incomplete metadata.
Instruction Scope
Instructions are limited to calling Beeminder's HTTPS API and manipulating JSON with jq — they don't reference other system files, unrelated services, or external endpoints. This is appropriate for the declared purpose, but the examples implicitly require command-line tools and assume access to environment variables not declared in metadata.
Install Mechanism
Instruction-only skill with no install spec or code files — low install risk. Nothing will be downloaded or written to disk by an installer step.
Credentials
SKILL.md requires two sensitive environment variables (BEEMINDER_USERNAME and BEEMINDER_AUTH_TOKEN) but the registry metadata lists no required env vars and no primary credential. Requesting an auth token makes sense for this API, but the metadata omission prevents automated credential handling and is an incoherence that should be fixed.
Persistence & Privilege
The skill is not marked always:true and contains no install or self-modifying steps. It does not request persistent system presence or modify other skills/configurations.
What to consider before installing
This skill appears to implement the Beeminder API via curl but the registry metadata is inconsistent with its runtime instructions. Before installing: (1) Confirm you are comfortable providing your Beeminder personal auth token (BEEMINDER_AUTH_TOKEN) and username — the token is sensitive and grants API access to your account. (2) Ask the skill publisher or registry maintainer to update metadata to declare the required env vars and primary credential so automated tooling can handle secrets properly. (3) Note that SKILL.md says 'No CLI dependencies' but uses curl and jq; ensure those binaries exist and are allowed in your environment. Because there are no code files and no installer, risk from arbitrary code download is low, but do not install if you cannot or will not supply a dedicated Beeminder token or if you require stricter provenance (homepage/source unknown).Like a lobster shell, security has layers — review code before you run it.
latestvk977r11dp5j8v86edxjx6rt4sh80t77b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.