ClawHub

Fish

v2.0.0

Fish makes utility tools simple. Use when you need fish.

⭐ 0· 139·0 current·0 all-time
by@bytesagain1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (utility CLI for recording, searching, exporting local data) matches the provided shell script and SKILL.md. The script implements logging, search, status, export, and other commands described in the README.
ℹ
Instruction Scope
SKILL.md and the script operate locally and only reference the DATA_DIR (~/.local/share/fish). They do not call external networks or require unrelated files/credentials. Note: the export implementation writes JSON/csv/txt without escaping user-supplied values, so exported JSON may be syntactically invalid or leak structure if log values contain quotes/newlines; this is a robustness/privacy concern, not evidence of exfiltration.
✓
Install Mechanism
There is no install spec; the skill is instruction-only and includes a shell script. No downloads, package installs, or external installers are used.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. It writes only to a per-user data directory under the user's home, which is appropriate for a local CLI tool.
✓
Persistence & Privilege
always:false and normal invocation model. The script creates and writes files under the user's home directory (expected for a local logger). It does not modify other skills or global agent settings.
Assessment
This skill appears to be a simple local CLI that logs and exports data to ~/.local/share/fish. Before installing or running it: 1) inspect the full script (the provided file was truncated in the manifest) to confirm there are no unexpected network calls or commands; 2) be aware that all data is stored in plain text under your home directory (no encryption) — avoid logging secrets there; 3) exported JSON is produced without escaping user values, so exports may be malformed or reveal structure if entries contain quotes/newlines; and 4) because it is a shell script, run it only if you trust the repository/source.

Like a lobster shell, security has layers — review code before you run it.

latestvk97548k64q4pa4v0q8ksdwwdjs8335k1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments