pokerpal
v1.0.0Query PokerPal poker game data - games, players, buy-ins, settlements
⭐ 1· 1.6k·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description map directly to the code and declared env vars: the skill calls a PokerPal API at POKERPAL_API_URL using POKERPAL_BOT_API_KEY. Nothing requested appears unrelated to querying games, players, buy-ins, and summaries.
Instruction Scope
SKILL.md confines runtime behavior to the provided tool calls (list_groups, get_group_games, get_game_players, get_player_buyins, get_group_summary) and formatting rules. It does not instruct reading local files, unrelated env vars, or exfiltrating data to third-party endpoints beyond the configured API URL.
Install Mechanism
There is no install spec (instruction-only runtime plus a small index.js implementation). No downloads or external installers are used, so nothing arbitrary is written to disk by an installer.
Credentials
Only POKERPAL_API_URL and POKERPAL_BOT_API_KEY are required and the code uses exactly those. The primary credential matches the service being accessed and is proportional to the skill's function.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or access to other skills' configs. Autonomous invocation is allowed (platform default) but not combined with any broad or unexpected privileges.
Assessment
This skill appears coherent and only uses the API URL and bot API key to query PokerPal endpoints. Before installing: ensure the POKERPAL_API_URL points to a trusted PokerPal instance (prefer https), and that the POKERPAL_BOT_API_KEY you supply has only the minimum needed permissions (ideally read-only) and is rotated if compromised. Verify that sharing player and buy-in data with this service complies with your privacy expectations. Confirm your runtime environment provides fetch or equivalent, since the code uses fetch to call the API.Like a lobster shell, security has layers — review code before you run it.
latestvk976x5z65qc178vqkjdcm4qvps80j8fs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
♠️ Clawdis
EnvPOKERPAL_API_URL, POKERPAL_BOT_API_KEY
Primary envPOKERPAL_BOT_API_KEY