Atlas Obscura API
v0.1.0Query Atlas Obscura places for weird/obscure location inspiration. Use when you need nearby curiosities by coordinates, place lookup by ID, or global place c...
⭐ 0· 19·0 current·0 all-time
byDoug Smith@dougbtv
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and dependencies: package.json depends on atlas-obscura-api and the included script calls that library to search places and fetch place details. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md instructions are narrowly scoped to installing the npm dependency and running the script with specific command-line arguments (search, place-short, place-full, places-all). The instructions do not direct the agent to read unrelated files, environment variables, or to send data to unexpected endpoints beyond what the atlas-obscura-api library will call.
Install Mechanism
This is an instruction-only skill but requires running `npm install` (per SKILL.md), which will pull atlas-obscura-api and its transitive deps from the public npm registry (package-lock.json shows atlas-obscura-api@2.2.0). Pulling packages from npm is expected here but carries the normal supply-chain risk of third-party packages; there is no download from obscure URLs or extract-from-remote-archive behavior.
Credentials
No environment variables, credentials, or config paths are required. The skill does not request unrelated secrets or broad access to other services.
Persistence & Privilege
Skill is not always-enabled and does not request elevated persistence or modify other skills or system-wide settings. It runs on demand and only uses its local script and npm packages.
Assessment
This skill appears coherent and only needs you to run `npm install` and then the provided Node script. Before installing, consider: (1) npm install will fetch third-party packages (atlas-obscura-api and its deps) — if you have strict supply-chain policies run it in a sandbox or review the package(s) first; (2) the script will make network calls to Atlas Obscura via the library, so do not run it in an environment containing secrets you don't want exposed; (3) review or vet the atlas-obscura-api package source if you require a higher trust level. If you want maximum isolation, run the skill in a disposable container or VM.Like a lobster shell, security has layers — review code before you run it.
latestvk97dspemtmhpyzpy3s8regf5zx84hsrm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.