scryfall-cards
v1.0.0Search and retrieve Magic: The Gathering card data using the Scryfall API. Use this skill when the user asks about MTG cards, wants to search for cards by name, type, color, mana cost, oracle text, set, or any other card attribute. Also use for getting card images, prices, rulings, legality information, or random cards. Triggers include mentions of MTG, Magic, Magic: The Gathering, card names, deck building questions, or requests for card information.
⭐ 1· 1.4k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the included Python script all describe and perform Scryfall API queries and card formatting. There are no unrelated environment variables, binaries, or services requested.
Instruction Scope
SKILL.md instructs only how to call Scryfall endpoints, includes rate-limit guidance, and references the included script. The instructions do not ask the agent to read local secrets, system files, or send data to unexpected endpoints.
Install Mechanism
No install spec is provided (instruction-only), which is low risk. A helper Python script is included but would only be run by an operator; there are no downloads from third-party URLs or archive extraction steps.
Credentials
The skill declares no required environment variables or credentials and the code does not access secrets or config paths. Network access to api.scryfall.com is the only external dependency.
Persistence & Privilege
The skill is not force-included (always: false) and does not request persistent system-wide privileges or modify other skills' configurations.
Assessment
This skill appears safe and does exactly what it claims: it issues HTTP requests to the Scryfall public API and formats results. Before installing, consider: (1) the source is 'unknown' — review the included scripts yourself if you plan to run them locally; (2) the script will make outbound network requests to api.scryfall.com (no credentials are sent), so if you need to limit network egress run it in a sandbox; (3) if you want tighter control, inspect the Python file for any changes and ensure Python and requests/urllib behavior are acceptable in your environment. If you only need read-only card lookups, no secrets or special permissions are required.Like a lobster shell, security has layers — review code before you run it.
latestvk972nbbd9w0beajh0hr14b2ztn80kv1m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.