Groundapi Context Aware
v1.1.0Context-aware daily assistant — weather, packages, IP, tax calculator, calendar, fuel prices, traffic restrictions, and daily briefing. Powered by GroundAPI...
⭐ 0· 83·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily/context-aware assistant) match the instructions: the SKILL.md consistently calls GroundAPI MCP tools (life_weather, life_ip, life_logistics, life_tax, life_calendar, life_oil_price, life_traffic, info_trending, info_bulletin). The single required env var GROUNDAPI_KEY is appropriate for a third-party API client. Minor note: the precondition example shows an MCP header X-API-Key while metadata declares GROUNDAPI_KEY — this is a plausible mapping but worth verifying in your deployment.
Instruction Scope
Runtime instructions stay within the described purpose and only instruct use of GroundAPI tools. The skill will call life_ip() automatically when city is not specified, and life_logistics may prompt for the recipient's phone last-4-digits for some carriers — these actions collect location or limited PII and will be sent to GroundAPI. There are no instructions to read local files or unrelated environment variables.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded during install.
Credentials
Only one required credential (GROUNDAPI_KEY) is requested, which is proportionate. Consider verifying the key's scope/permissions and whether it is shared across services. Also confirm how your platform maps GROUNDAPI_KEY into the MCP header (X-API-Key) shown in the precondition example.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request elevated persistence or modify other skills. Autonomous invocation is permitted by default but not combined here with additional privileges.
Assessment
This skill appears to do what it says: it forwards queries to GroundAPI MCP tools and needs a GROUNDAPI_KEY. Before installing: 1) Verify you trust GroundAPI (https://groundapi.net) and review their privacy/data-retention policy because user IPs, tracking numbers, and optional phone digits will be sent to their server; 2) Use a key with minimal scope and rotate/revoke it if needed; 3) Be cautious about entering sensitive personal data (full phone numbers, full addresses, identity documents) — the skill may request the last 4 digits for parcel verification, which is reasonable, but avoid submitting more PII than necessary; 4) Confirm how your platform maps GROUNDAPI_KEY to the mcp X-API-Key header shown in the precondition; 5) If you need stronger guarantees, ask the provider for documentation on what request payloads look like and whether logs include user-supplied content or IPs.Like a lobster shell, security has layers — review code before you run it.
latestvk97dvq94j527ywkr9ay569bg1s84x7k2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌤️ Clawdis
EnvGROUNDAPI_KEY
Primary envGROUNDAPI_KEY