ClawHub

Zara

v0.1.1

Information assistant for Zara. Search products, news, financials, and official resources for Zara.

⭐ 0· 132·1 current·1 all-time
by@hanxueyuan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description (Zara information/search assistant) match the SKILL.md content. The skill is instruction-only and declares no binaries, env vars, or config paths — all proportionate to a read/search assistant.
ℹ
Instruction Scope
SKILL.md is high-level and lists the information modules to provide (history, business scope, global footprint, latest news). It does not instruct the agent to read local files or access secrets, but it is vague about how to obtain information (implies web searches). That grants the agent broad discretion to search external sources, which is expected for this purpose but worth noting.
✓
Install Mechanism
No install specification or code files are present (instruction-only). This minimizes disk writes and third-party code risk.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. There are no unexplained secrets or unrelated services requested.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request elevated or persistent privileges; nothing indicates it modifies other skills or system-wide configs.
Assessment
This skill is lightweight and internally consistent: it asks for no credentials and installs nothing. Two things to consider before installing: (1) source unknown — there is no homepage or publisher info, so only install if you trust the registry owner or are comfortable with minimal provenance; (2) the SKILL.md is intentionally vague about how it gathers data (web search). If your agent has web-browsing or network access, the skill may perform external searches — limit agent browsing or test in a sandbox if you need to protect sensitive context. If you need guaranteed authoritative data (financial filings, official press releases), prefer skills that call specific verified APIs or link to official sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk9761x924rdajrcs2n39725cm184x8qq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments