Hong Kong Urbix Events
v1.0.3Fetches and returns detailed Hong Kong URBTIX event performances by parsing natural language questions with date, venue, and event filters.
⭐ 0· 96·0 current·0 all-time
bySteven Ho@stevenho1394
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, README, plugin.json, SKILL.md and the Python code all focus on downloading and parsing URBTIX batch XMLs from the documented Tencent COS URL, caching results, and answering natural-language queries. There are no unexpected external services or unrelated credentials requested.
Instruction Scope
Runtime instructions and code limit activity to: parse the question, download/validate URBTIX XML batches, cache them under the agent workspace, and return matches. The skill reads/uses the OPENCLAW_WORKSPACE environment variable (documented in README) and performs cache/lock file operations and silent cache purging; these filesystem actions are expected but should be noted by users who care about local writes.
Install Mechanism
No install spec; the skill is instruction-only with a single Python file that uses only the standard library. There are no downloads from arbitrary URLs or third‑party package installs during setup.
Credentials
The skill requires no secrets or credentials. It reads the OPENCLAW_WORKSPACE environment variable to determine cache location (the README documents this). OPENCLAW_WORKSPACE is not listed as a required env var in registry metadata — it's optional behavior, but the skill will create and write files under that workspace.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. It writes cache and lock files only within the agent workspace and does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default).
Assessment
This skill appears to do what it says: download URBTIX batch XMLs from the listed Tencent COS URL, validate them, cache them under your agent workspace, and answer queries. Before installing, consider:
- The skill will create and write files to OPENCLAW_WORKSPACE/urbtix_cache/ (ensure that path is correct and writable and you are comfortable with those local files). The README mentions this var but it's not declared as a required env var in the registry metadata.
- The skill performs network requests to the documented COS URL; if your environment restricts outbound network access, install accordingly.
- The code contains some duplicated/unfinished-looking blocks (e.g., repeated download logic) — this looks like sloppy coding rather than malicious behavior; it may impact robustness but not safety. If you want extra assurance, review or run the code in an isolated environment first.
- Respectful polling is enforced by the skill, but you should still avoid automated high-frequency invocations.
If you want me to, I can: (a) scan the rest of the truncated file contents for other behaviors, (b) produce a minimal security checklist to run the code in a sandbox, or (c) point out exact lines to inspect further.Like a lobster shell, security has layers — review code before you run it.
latestvk97494mczjfgsq2xxpbpy3xbxn83ymys
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
