ClawHub

China Recipe

v1.0.2

中国菜谱大全。Use when user wants to find Chinese recipes, cooking instructions, ingredient lists, or meal planning. Supports regional cuisines, dietary preferences...

⭐ 0· 86·0 current·0 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description (China Recipe) match the skill contents. Requesting python3 is proportional because SKILL.md includes a small Python search snippet. Minor inconsistency: the doc says the skill uses an LLM to dynamically generate recipes but also embeds a local RECIPES dictionary and states "菜谱数据内置" — this is plausible (hybrid behavior) but worth noting.
✓
Instruction Scope
SKILL.md instructs the agent to generate or return recipes and includes a local search function. It does not ask the agent to read arbitrary files, access environment variables, call external endpoints, or exfiltrate data. All runtime behavior described is limited to recipe generation/search and formatting.
✓
Install Mechanism
There is no install spec (instruction-only). That is low risk. Requiring python3 is reasonable given the included Python snippet; nothing is downloaded or written to disk by the skill itself.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The absence of secrets or unrelated service tokens is appropriate for a local recipe helper.
✓
Persistence & Privilege
always is false and the skill does not request persistent/system-wide configuration or elevated privileges. It does not modify other skills or agent-wide settings.
Scan Findings in Context
[unicode-control-chars] unexpected: The static pre-scan flagged unicode-control characters in SKILL.md. This is not expected for a recipe helper; it may be benign (formatting, invisible characters) but could also be an attempt to influence model parsing. The rest of the file appears readable and coherent, so this is likely low-risk but worth inspecting if you are concerned.
Assessment
This skill appears coherent and limited in scope: it needs only python3, contains local recipe data/search logic, and asks for no credentials or installs. Before installing, you may (1) inspect the raw SKILL.md for any hidden/invisible characters (the scanner flagged unicode-control-chars), (2) confirm whether you prefer purely LLM-generated recipes or the embedded local recipes (the doc mentions both), and (3) run it in a least-privileged environment or sandbox if you want to observe behavior first. Because the skill can be invoked autonomously by the agent (normal default), review agent autonomy settings if you prefer to control when skills run.

Like a lobster shell, security has layers — review code before you run it.

latestvk977atdcy1grjvcdz3rd27q1tx83jqk5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍳 Clawdis
Binspython3

Comments