Local Festivals

v0.1.0

提供非遗活动列表、庙会灯会指南及传统节日文化科普。

0· 91·0 current·0 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description and SKILL.md consistently describe festival listings, guides, filters and return fields. There are no unexpected required binaries, env vars, or install steps — this matches the stated purpose.
Instruction Scope
SKILL.md is high-level and specifies dynamic outputs (real‑time queue status, reservation channels, electronic ticket numbers, navigation, community photos, review-driven popularity). It does not instruct how to obtain those data sources or request credentials, so an agent will likely perform web searches or use platform location/APIs to fulfil them. This is not inherently malicious but is vague and grants the agent broad discretion.
Install Mechanism
No install spec and no code files — lowest-risk instruction-only skill; nothing is written to disk by the skill itself.
Credentials
The skill declares no environment variables or credentials, which is proportionate. However, its realtime features plausibly require access to location services, mapping/navigation APIs, or review-site APIs in practice; those are not declared, so the agent may rely on platform connectors or web access instead.
Persistence & Privilege
always:false (default) and no special persistence requested. The skill may be invoked autonomously by the agent (platform default), but it does not request elevated or permanent privileges.
Assessment
This skill appears coherent and low-risk: it needs no installs or credentials. Note that its outputs claim real‑time location/review data — the agent will likely perform web or location lookups to provide those. Before using, decide whether you are comfortable with the agent accessing the web or your location; if not, restrict those platform permissions or ask the author how data is sourced. Avoid entering any personal credentials into prompts and verify returned event/booking info with official sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f4cdggavwx1kqvcf2sn1hn58385kx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments