Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (HMI design tool) align with the included CLI script and commands. The script implements add/list/search/remove/export/stats/config functionality and only touches a local data directory (default ~/.hmi). Nothing requested by the skill (no credentials, no external services) is unexpected.
Instruction Scope
SKILL.md instructs the agent to run scripts/script.sh <command>, which is exactly the included script. The script only reads/writes files under the DATA_DIR (default ~/.hmi) and prints to stdout. It does not access other system config, credentials, or network endpoints.
Install Mechanism
No install spec — instruction-only with an included shell script. No downloads or package installs are requested, and the script is local, so nothing arbitrary is fetched or written during install.
Credentials
No required environment variables or credentials. One optional env var (HMI_DIR) controls the data directory — proportional to the stated functionality.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills or system-wide agent settings. It will create/modify files under the user's ~/.hmi directory (expected behavior for a CLI tool).
Assessment
This skill will execute a local shell script and store data under ~/.hmi (data.jsonl and config.txt). There are no network calls or credential requests. If you plan to install/run it, review scripts/script.sh yourself (it is small and readable) and be aware it will write and edit files in your home directory. If you prefer isolation, run it in a sandbox or container.Like a lobster shell, security has layers — review code before you run it.
latestvk97ej6y9vnqna0cnaqbc8frndx8388ja
License
MIT-0
Free to use, modify, and redistribute. No attribution required.