Hong Kong Supermarket Shopping
v1.2.3Helps users find the best deals at Hong Kong supermarkets using real-time Consumer Council price data. For any product, get the cheapest store, current price...
⭐ 0· 282·0 current·0 all-time
bySteven Ho@stevenho1394
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actual behavior: the skill fetches a public pricewatch CSV and performs price comparison. Manifest and code reference the same Consumer Council CSV URL. Minor manifest/version text inconsistencies (one embedded section references v1.2.2) are present but do not affect capability.
Instruction Scope
Runtime instructions and supermarket.py limit actions to downloading a single CSV from the Consumer Council, saving it under the skill's data/ directory, housekeeping old CSVs, and searching the CSV. The code does not read unrelated system files, environment variables, or other credentials.
Install Mechanism
No install spec included; runtime is pure Python using only the standard library (urllib, csv, pathlib). The only disk writes are to a data/ folder anchored to the skill directory (Path(__file__).parent / 'data'), consistent with README claims.
Credentials
The skill requests no environment variables, no credentials, and no external binaries. Network access is required (to a single documented Consumer Council URL) which is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide configs. It writes only to its own data directory and performs normal housekeeping of those files.
Assessment
This skill appears coherent and limited to downloading the Consumer Council's public pricewatch CSV (online-price-watch.consumer.org.hk) and doing local lookups. If you install it, note that: (1) it will make an outbound HTTPS request on first use to fetch the CSV; (2) it will create a data/ folder inside the skill directory and keep today's CSV (old files are removed automatically); (3) it runs with the agent's normal ability to invoke skills autonomously — if you prefer to review network activity first, run it in a sandbox or disable autonomous invocation. If you want extra assurance, inspect or run supermarket.py locally to verify the CSV URL and contents before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk972v5h58gtyw1w0ejee0smgxd8468mr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.