JSON Query Tool
v1.0.0免费本地运行的在线 JSON 查询工具,支持路径查询、数组索引、通配符及深层嵌套,快速提取所需数据。
⭐ 0· 38·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (JSON Query Tool) matches the provided artifacts (index.html, README, SKILL.md). No unrelated binaries, env vars, or capabilities are requested.
Instruction Scope
SKILL.md directs the agent to invoke this skill for JSON queries and points to an online demo and GitHub repo. The runtime instructions do not ask the agent to read local files, environment variables, or transmit data. Note: the skill references external URLs (demo host and GitHub) — invoking those links would contact remote endpoints, but the skill itself claims local-only data processing.
Install Mechanism
No install spec and no code executed at install time (instruction-only plus an included index.html). Lowest-risk delivery model: nothing is written to disk by an installer.
Credentials
The skill declares no required environment variables or credentials (appropriate for a client-side tool). Deployment instructions in DEPLOY.md show optional commands that use deployment tokens (VERCEL_TOKEN, CLOUDFLARE_API_TOKEN, NETLIFY_TOKEN) — those are only relevant if you choose to deploy the app yourself and are not required to use the skill as provided.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. Autonomous invocation is enabled (platform default) but not combined with other red flags.
Assessment
This appears to be a benign, local front-end JSON query utility. Before installing or invoking: (1) confirm you do not paste sensitive secrets into any remote demo site linked in SKILL.md — the tool claims to process data locally, but visiting the hosted demo will contact external servers; (2) if you follow DEPLOY.md to self-host, you will need to provide deployment tokens (Vercel/Cloudflare/Netlify) — only supply those to services you trust; (3) you can use the included index.html offline to keep data local. If you want higher assurance, inspect the full index.html in a safe environment to verify no network calls are made when running queries locally.Like a lobster shell, security has layers — review code before you run it.
latestvk97exfpbr0ecbmz43s17sfb9rh84a4gk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
