CN Life Toolkit - 中国生活服务工具包
v1.0.0中国生活服务工具包，支持天气查询（街道级）、限行提醒、油价查询、快递物流跟踪、公交换乘查询等日常生活服务。
⭐ 0· 77·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (weather, traffic limits, fuel prices, courier tracking, transit) match the SKILL.md contents. The declared data sources (中国天气网, 中央气象台, 和风/高德/百度/快递100, 各地交管局等) are consistent with the stated features; there are no unrelated credentials, binaries, or paths requested.
Instruction Scope
SKILL.md gives clear, scope-limited instructions: when the user asks, query the listed public data sources and return results. It does not instruct the agent to read local files, environment variables, or other system state. It is somewhat high-level/vague about exact API endpoints and authentication, which likely means the agent will either scrape public webpages or rely on platform/web access rather than using declared API keys.
Install Mechanism
No install specification and no code files — instruction-only. Nothing is written to disk or installed during skill use, minimizing installation risk.
Credentials
The skill declares no required environment variables or credentials. Some listed APIs (e.g., 高德/百度/和风/快递100) commonly require API keys for full functionality; the skill does not request them, which is explainable (it may rely on public scraping or on-the-fly web queries) but worth noting since functionality may be limited without keys.
Persistence & Privilege
always:false (default), user-invocable, and not requesting system-wide config changes. The skill does not request permanent presence or elevated privileges.
Assessment
This is an instruction-only skill that appears coherent for everyday local-service lookups. Before installing: (1) know it will query third-party web services (your queries — e.g., locations or tracking numbers — may be sent to those external services), so consider privacy implications; (2) expect some features to require API keys from HeWeather/Gaode/Baidu/Kuaidi100 for robust results — the skill doesn't ask for keys, so it may resort to scraping or limited public endpoints; (3) because there is no install or code, direct system compromise risk is low, but only use if you trust the skill source and accept that requests will contact external providers. If you need stronger privacy or guaranteed authenticated API usage, prefer a skill that explicitly declares and documents required credentials and endpoints.Like a lobster shell, security has layers — review code before you run it.
latestvk976431gzdpssp0d6j9qryd07n83x5q9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.