mtg-edh-deckbuilder
v1.0.3Search and retrieve Magic: The Gathering card data using the Scryfall API. Use this skill when the user asks about MTG cards, wants to search for cards by name, type, color, mana cost, oracle text, set, or any other card attribute. Also use for getting card images, prices, rulings, legality information, or random cards. Triggers include mentions of MTG, Magic, Magic: The Gathering, card names, deck building questions, or requests for card information.
⭐ 1· 1.9k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Scryfall MTG card search) matches the included SKILL.md and the Python CLI script which issues requests to https://api.scryfall.com. There are no unrelated environment variables, binaries, or external services requested.
Instruction Scope
SKILL.md restricts runtime behavior to making HTTP requests to Scryfall with a stated User-Agent, respecting rate limits, and formatting results. It does not instruct reading local files, accessing unrelated environment variables, or contacting unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill plus a bundled script). Nothing is downloaded or extracted from external URLs and no package manager installs are declared.
Credentials
The skill requires no environment variables, credentials, or config paths. The requests it makes are appropriate for the stated purpose (searching Scryfall).
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills or system-wide settings. It operates at runtime and performs only outbound API calls to Scryfall.
Assessment
This skill appears to be what it claims: a simple Scryfall client. Before installing, note that:
- The skill will make outbound HTTP requests to api.scryfall.com for each query, so avoid entering any sensitive data (passwords, tokens, private keys) into search fields because they would be sent to Scryfall.
- No credentials are required, and there is no install step that fetches remote code, but the repository owner/homepage is not provided — if you need stronger assurance, inspect the included script (scripts/scryfall_search.py) yourself to confirm behavior.
- The skill returns card image URLs and price data from Scryfall; those resources are hosted externally and will be loaded from Scryfall when used.
Overall the skill is coherent and proportional to its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97cdavmzr4qnec995e1gq537x80ks3m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.