Recreation Information Database Search
v1.0.0Search the Recreation Information Database (RIDB) for campgrounds and recreation facilities near a location. Use when finding campgrounds, recreation areas, or federal facilities by location/radius. Supports geocoding (city names) and lat/lon coordinates.
⭐ 1· 1.7k·2 current·2 all-time
by@seanrea
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name/description, README, SKILL.md, and the single Python script all describe and implement searching RIDB and geocoding via OpenStreetMap; the requested network access and patterns are appropriate for that purpose. However, the registry metadata claims no required environment variables or primary credential while both the SKILL.md and scripts require a RIDB_API_KEY — a mismatch.
Instruction Scope
Runtime instructions are scoped to geocoding (Nominatim) and RIDB API calls, with CLI flags and JSON output. The SKILL.md directs setting RIDB_API_KEY and using the provided script; there are no instructions to read unrelated files, collect extra system data, or post data to unexpected endpoints.
Install Mechanism
No install spec; this is instruction+single-file script using only the Python standard library. Nothing is downloaded or written during install, minimizing install-time risk.
Credentials
The code requires a RIDB API key (RIDB_API_KEY env var or --api-key) which is proportionate to the purpose. The problem is that the registry metadata incorrectly lists 'Required env vars: none' and 'Primary credential: none' — this omission is an incoherence that could mislead users about what secrets the skill needs.
Persistence & Privilege
The skill is not always-enabled, does not request system-level persistence, and contains no code that modifies other skills or system configuration. It only runs as a CLI and makes outbound requests to expected APIs.
What to consider before installing
This skill appears to do exactly what it says (search RIDB and geocode locations) and the code is a simple Python CLI using only stdlib and network calls to RIDB and OpenStreetMap. However, the registry metadata fails to declare the required RIDB_API_KEY credential. Before installing or running: (1) verify you obtained the RIDB API key from https://ridb.recreation.gov/profile and are comfortable providing it to this script, (2) inspect scripts/search.py yourself (it’s short and readable) to confirm there are no unexpected network endpoints, (3) prefer running it in a restricted environment (or container) if you don’t fully trust the source, and (4) ask the publisher to correct the metadata so required credentials are explicit. If the metadata is corrected to list RIDB_API_KEY as a required credential and nothing else, this would likely be coherent/benign.Like a lobster shell, security has layers — review code before you run it.
latestvk97a0tfw5cpkx65a6kp2k9j8hh805pky
License
MIT-0
Free to use, modify, and redistribute. No attribution required.