围棋棋谱数据库
v1.0.5weiqi-db 围棋棋谱数据库 - 本地棋谱管理工具，支持SGF导入、元数据编辑、标签管理、全文搜索。数据存储于单个JSON文件，AI友好的JSON接口设计。
⭐ 0· 175·0 current·0 all-time
bytokener@zhangbin2025
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (local SGF DB and search) align with included code and CLI. The skill only reads/writes a JSON DB under the user's home (~/.weiqi-db/database.json), parses SGF, compresses content, and exposes query/add/update/tag/delete operations. No unrelated services or credentials are requested.
Instruction Scope
SKILL.md focuses on running the included Python CLI and using temporary JSON files for complex parameters, which matches the code. One oddity: the doc's '禁止行为' (forbidden actions) says '禁止直接读取 ~/.weiqi-db/database.json' and '禁止使用 JSON 输出后再用 Python 解析提取 SGF' despite the tool itself storing DB there and offering JSON output—this is an inconsistency in guidance but not evidence of malicious behavior. The instructions do permit writing temp files (/tmp/where.json, /tmp/set.json) and reading them, which is expected for the CLI but means the agent will create and read local files as part of normal operation.
Install Mechanism
No installer is embedded; code files are included and SKILL.md instructs 'pip3 install tinydb'. Pulling a small, well-known Python dependency (tinydb) is proportionate. There is no external download URL or extraction of arbitrary archives.
Credentials
The skill requires no environment variables, no credentials, and no special config paths beyond creating/using ~/.weiqi-db/database.json. That matches its functionality and is appropriately scoped.
Persistence & Privilege
always is false and the skill does not request permanent platform-wide privileges. It writes/reads only its own data file under the user's home directory and does not modify other skills or system-wide agent settings.
Assessment
This appears to be a local-only SGF database tool and is coherent with its instructions and code. Before installing, note: (1) the tool will create and manage ~/.weiqi-db/database.json (back it up if you have similarly named data), (2) it requires pip3 install tinydb, so ensure you trust that package source and your Python environment, (3) the skill will write/read temporary JSON files (e.g., /tmp/*.json) when invoked — avoid running the tool on sensitive system directories, and (4) SKILL.md contains an odd prohibition about not reading the DB file directly; that is a documentation inconsistency but not a security signal. If you need higher assurance, review the complete scripts (db.py and sgf_parser.py) yourself or run them in a sandboxed account/environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97aak6dwtcefgbsb8cctv6qnd84m31b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.